Active Directory authorization: IIS vs Visual Studio Dev server

Question

I have a web project that uses Active Directory authorization (All controllers marked with AuthorizeAttribute). In web.config i have following authentification section:

<authentication mode="Windows" />
<authorization>
  <deny users="?" />
</authorization>

The problem is: When i run project under Visual Studio Development Server everything goes fine, it pops authorization window, after entering login/password i can see all site contents.

But, when i try to run it under IIS (7.5) authorization window still pops, but login/password is always incorrect (looks like it cannot access AD). Site is configured to use windows authorization. Application pool runs using my windows login/password. What am i missing?

Are you running IIS on the same machine, or on a server somewhere? — Luca, Apr 29 '13 at 14:30

score 2 · Accepted Answer · edited May 23 '17 at 12:04

2

If your host header file is pointing to 127.0.0.1, it may be the authentication loopback check.

If that is the case, the answer is already detailed at why does windows authentication / impersonation fail on asp.net application with iis 7.5 / windows 7 /. In short, open regedit, and add a DWORD DisableLoopbackCheck = 1 to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.

edited May 23 '17 at 12:04

Community

1
1

answered Apr 29 '13 at 14:45

Luca

346
1
4

score 1 · Answer 2 · answered Apr 30 '13 at 12:09

I was having same problem, following solved my problem:

Select website
Select "Features View".
Open "Authentication" section. Note: I am Assuming your website has Windows Authentication enabled as stated above by you.
Select "Windows Authentication"
In right side "Actions" section, click on providers.
Now from "Providers" Pop-up select "Negotiate" and remove it.
refresh website & run

Please let me know if it works for you.

Active Directory authorization: IIS vs Visual Studio Dev server

2 Answers2

Linked