Password Change Prompt breaks ASP.NET pages

R

Rob Edwards

Our network policy is that passwords must be changed every 90 days... so 14
days before the password expires the user begins to get prompted to change
their password....once this prompt begins, most of the web applications I
have written in Visual Studio .NET begin to break. On some of them, if the
user clicks "Refresh" then the page will open correctly... on others, the
pages refuse to load.

The pages use basic authentication.... the web server is Windows 2003.. we
are a 2003 network using Kerberos... the Web Server uses impersonation
(which is why we use basic authentication) to access the SQL servers.

Any thoughts or ideas?
 
K

Ken Schaefer

Please define "Start to break"? Do you see errors? What are they? Do you get
nothing? Do you get something, but not what you expect?

(PS, I am assuming that when you say "2003 Network" you are running a
Windows 2003 Domain, at 2003 Functional Level)

Cheers
Ken


: Our network policy is that passwords must be changed every 90 days... so
14
: days before the password expires the user begins to get prompted to change
: their password....once this prompt begins, most of the web applications I
: have written in Visual Studio .NET begin to break. On some of them, if
the
: user clicks "Refresh" then the page will open correctly... on others, the
: pages refuse to load.
:
: The pages use basic authentication.... the web server is Windows 2003.. we
: are a 2003 network using Kerberos... the Web Server uses impersonation
: (which is why we use basic authentication) to access the SQL servers.
:
: Any thoughts or ideas?
:
:
 
R

Rob Edwards

My apologies for not being more specific...

"Start to break" means the pages will not be displayed. I enter the URL in
the browser and am prompted for basic authentication. After typing in the
domain/username + password the error is:

"The page cannot be found."

If I click Refresh, the page is correctly displayed.

On some of the other pages, clicking Refresh does not resolve the issue.

When I run the applications on my workstation (of course the web server is
the same machine) no errors occur. It only happens once the web sites are
pushed to the web server.

Thanks for taking the time to repond.

Rob
(PS, I am assuming that when you say "2003 Network" you are running a
Windows 2003 Domain, at 2003 Functional Level)

Your assumptions are correct. We have a Windows 2003 Doman at a 2003
Functional Level.

Once I click Refresh, the page appears
 
K

Ken Schaefer

Can you confirm a couple of things?

a) If you are using Internet Explorer as your browser, you have disabled
"Show Friendly HTTP Errors" in Tools -> Internet options -> Advanced?

b) on the "Page can not be found" error, you see HTTP 404 File Not Found
(you may need to disable Show Friendly HTTP errors to see this). Or do you
see some other HTTP status code?



Cheers
Ken


: My apologies for not being more specific...
:
: "Start to break" means the pages will not be displayed. I enter the URL
in
: the browser and am prompted for basic authentication. After typing in the
: domain/username + password the error is:
:
: "The page cannot be found."
:
: If I click Refresh, the page is correctly displayed.
:
: On some of the other pages, clicking Refresh does not resolve the issue.
:
: When I run the applications on my workstation (of course the web server is
: the same machine) no errors occur. It only happens once the web sites are
: pushed to the web server.
:
: Thanks for taking the time to repond.
:
: Rob
:
: > (PS, I am assuming that when you say "2003 Network" you are running a
: > Windows 2003 Domain, at 2003 Functional Level)
:
: Your assumptions are correct. We have a Windows 2003 Doman at a 2003
: Functional Level.
:
: Once I click Refresh, the page appears
: : > Please define "Start to break"? Do you see errors? What are they? Do you
: > get
: > nothing? Do you get something, but not what you expect?
: >
: > (PS, I am assuming that when you say "2003 Network" you are running a
: > Windows 2003 Domain, at 2003 Functional Level)
: >
: > Cheers
: > Ken
: >
: >
: > : > : Our network policy is that passwords must be changed every 90 days...
so
: > 14
: > : days before the password expires the user begins to get prompted to
: > change
: > : their password....once this prompt begins, most of the web
applications
: > I
: > : have written in Visual Studio .NET begin to break. On some of them,
if
: > the
: > : user clicks "Refresh" then the page will open correctly... on others,
: > the
: > : pages refuse to load.
: > :
: > : The pages use basic authentication.... the web server is Windows
2003..
: > we
: > : are a 2003 network using Kerberos... the Web Server uses impersonation
: > : (which is why we use basic authentication) to access the SQL servers.
: > :
: > : Any thoughts or ideas?
: > :
: > :
: >
: >
:
:
 
R

Rob Edwards

I've turned off Show Friendly HTTP Errors...

The error message is indeed an HTTP 404 File Not Found.

Thanks for the help,
Rob
 
K

Ken Schaefer

Hi,

This is an unusual situation (though I'm sure there's a rational
explanation). Normally for security related events you'd be seeing Access
Denied type errors if passwords weren't synched. I'm wondering if your web
app is going some kind of redirect or similar when it encounters an
authentication error, and the page it's redirected to does not exist?

How are the users changing their passwords? Via the web app? or via some
other method (e.g. from withing Windows security dialogue itself)?

Can you check the IIS webserver logfiles, and check which the log entries
around the 404 request? Can you post a sample 404 request, and perhaps a
couple of requests before it, and a couple after (the ones that work when
you hit "refresh")?

Cheers
Ken


: I've turned off Show Friendly HTTP Errors...
:
: The error message is indeed an HTTP 404 File Not Found.
:
: Thanks for the help,
: Rob
:
: : > Can you confirm a couple of things?
: >
: > a) If you are using Internet Explorer as your browser, you have disabled
: > "Show Friendly HTTP Errors" in Tools -> Internet options -> Advanced?
: >
: > b) on the "Page can not be found" error, you see HTTP 404 File Not Found
: > (you may need to disable Show Friendly HTTP errors to see this). Or do
you
: > see some other HTTP status code?
: >
: >
: >
: > Cheers
: > Ken
: >
: >
: > : > : My apologies for not being more specific...
: > :
: > : "Start to break" means the pages will not be displayed. I enter the
URL
: > in
: > : the browser and am prompted for basic authentication. After typing in
: > the
: > : domain/username + password the error is:
: > :
: > : "The page cannot be found."
: > :
: > : If I click Refresh, the page is correctly displayed.
: > :
: > : On some of the other pages, clicking Refresh does not resolve the
issue.
: > :
: > : When I run the applications on my workstation (of course the web
server
: > is
: > : the same machine) no errors occur. It only happens once the web sites
: > are
: > : pushed to the web server.
: > :
: > : Thanks for taking the time to repond.
: > :
: > : Rob
: > :
: > : > (PS, I am assuming that when you say "2003 Network" you are running
a
: > : > Windows 2003 Domain, at 2003 Functional Level)
: > :
: > : Your assumptions are correct. We have a Windows 2003 Doman at a 2003
: > : Functional Level.
: > :
: > : Once I click Refresh, the page appears
: > : : > : > Please define "Start to break"? Do you see errors? What are they? Do
: > you
: > : > get
: > : > nothing? Do you get something, but not what you expect?
: > : >
: > : > (PS, I am assuming that when you say "2003 Network" you are running
a
: > : > Windows 2003 Domain, at 2003 Functional Level)
: > : >
: > : > Cheers
: > : > Ken
: > : >
: > : >
: > : > : > : > : Our network policy is that passwords must be changed every 90
: > days...
: > so
: > : > 14
: > : > : days before the password expires the user begins to get prompted
to
: > : > change
: > : > : their password....once this prompt begins, most of the web
: > applications
: > : > I
: > : > : have written in Visual Studio .NET begin to break. On some of
them,
: > if
: > : > the
: > : > : user clicks "Refresh" then the page will open correctly... on
: > others,
: > : > the
: > : > : pages refuse to load.
: > : > :
: > : > : The pages use basic authentication.... the web server is Windows
: > 2003..
: > : > we
: > : > : are a 2003 network using Kerberos... the Web Server uses
: > impersonation
: > : > : (which is why we use basic authentication) to access the SQL
: > servers.
: > : > :
: > : > : Any thoughts or ideas?
: > : > :
: > : > :
: > : >
: > : >
: > :
: > :
: >
: >
:
:
 
M

[MSFT]

Hi Rob,

If you use "windows intergrated" authentication instead, what will happened?

Luke
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
473,787
Messages
2,569,631
Members
45,339
Latest member
RandiMarti

Latest Threads

Top