已启用Iis 8基本身份验证，但仅接受Windows凭据 [英] Iis 8 basic authentication enabled but only accepting windows credentails

问题描述

您好。



我在IIS8中为基本身份验证配置了一个站点，但当我尝试点击它并提示输入凭据时，我传递的凭据不是已接受（这些是服务器上已获得对网站的完全控制权的本地帐户的凭据）。我肯定正确输入凭据。



我可以进行身份​​验证的唯一方法是输入我的网络凭据，这是奇怪的，因为Windows Auth甚至没有为此网站启用（也不是它的父级）。



我也试过通过Postman点击网站，我可以通过Wireshark看到正在发送身份验证标题但是我再次获得401.



更奇怪的是，这个站点也在第二台服务器上（这个服务器负载均衡）。在那台服务器上，一切正常，我复制了网站目录及其所有内容，与该服务器完全相同。



据我所知，网站是相同。



有什么建议吗？不确定在哪里看。



我尝试过：



我已经使用Wireshark来查看请求标头，并且正在使用凭据发送Authentication头。我试过Postman，Firefox和Chrome，所有人都从服务器上收到401.



我甚至试过从服务器本身访问该网站（远程登录）同样的事情发生。



更新：

我发现当我删除（或重命名）web.config文件时，问题就消除了，即我可以访问index.html页面。



所以，我试着除去web.config的内容，看看它是否是导致问题的特定部分，但是我除了最低限度并且仍然没有运气：

 <   configuration  >  
 <   system.webServer  >  
 
 <   / system.webServer  >  
 <   / configuration  >  

解决方案

我会查看有关基本身份验证的MS文档，并查看登录域配置部分

基本身份验证< basicAuthentication> | Microsoft Docs [ ^ ]

Hello.

I have a site configured for Basic Authentication in IIS8 but when I try to hit it and am prompted for credentials, the credentials I pass are not accepted (these are the credentials of a local account on the server that has been given Full Control to the site). I am definitely entering the credentials correctly.

The only way I can authenticate is by entering my network credentials which is odd because Windows Auth is not even enabled for this site (nor it's parent).

I've also tried hitting the site via Postman and I can see via Wireshark that the Authentication header is being sent but again, I get a 401 each time.

Even more odd, this site is also on a second server (with which this one is load balanced). On that server, all works fine and I copied the website directory and all its contents exactly as is from that server.

As far as I can tell, the sites are identical.

Any suggestions?? Not sure where to look.

What I have tried:

I've used Wireshark to look at the request header and the Authentication header is being sent with the credentials. I've tried from Postman, Firefox, and Chrome and all receive a 401 from the server.

I've even tried access the site from the server itself (while logged on remotely) and the same thing happens.

UPDATE:
I found that when I remove (or rename) the web.config file the problem is eliminated, i.e., I can access the index.html page.

So, I tried weeding down the contents of the web.config to see if it was a particular section that was causing the problem but I eliminated everything but the bare minimum and still no luck:

<configuration>
   <system.webServer>

   </system.webServer>
</configuration>

解决方案

I would review the MS Documentation on Basic Authentication and look at the section for configuration of login domains
Basic Authentication <basicAuthentication> | Microsoft Docs[^]

这篇关于已启用Iis 8基本身份验证，但仅接受Windows凭据的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！