Discussion Locked

401.3 error

0 helpful
4 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I set a folder on my public web (sitting on the DMZ), using NT challenge response.
Everytime I access it from my trusted network I get "
401.3 Unauthorized: Unauthorized due to ACL on resource " with netscape, IE displays " The page you are looking for is currently unavailable...."

But if I access the same folder with same usr/pass from the web or as a VPN user, I have no problem. Of course, when I allow anonymous access, I have no problem.

I use a user member of Domain Users group andit's a global account.

4 replies

by curlergirl

I'd need more specific information on the configuration of your DMZ and firewalls to know for sure, but it sounds like your user ID from the "trusted" (internal) domain doesn't have permission to access the public web folder you created. You say you're using the same user ID and password, but you are logging on to a different server and/or domain, so it's possible that the user ID has different permissions depending upon how you're logging on. Hope this helps!

by ticoloco

my dmz is 192.x.201.0, the server being 201.1 and with a domain of "web"

on my trusted network, my LAN is 192.x.200.0 with a different domain. Our win 9x machines don't authenticate against any server but we still use win9x logon window.

All my VPN users get an ip address from a 2nd network (192.168.10.0) under the trusted side.

our firewall uses a http filter for incoming http with is pointing to the web server (DMZ) and a http proxy for all outgoing traffic.

I found out that NT challenge/response won't go through a proxy, so I need to add another filter for the traffic between DMZ and trusted.

All permissions are set right, the user is a member of the domain users and is a global user who has change rights.

I hope thishelps, because this is all I have.

Thanks
Elliott

by curlergirl

Does it work if you use basic/clear text authentication rather than NT challenge/response? There is a problem using NT challenge/response with proxy, but basic/clear text uses the same authentication (i.e., same user names & passwords) except that it's not encrypted. Hope this helps!

This discussion is closed to new replies.