2008 R2 401 Error

[jledhead Profile]

I have a new windows 2008 server. I have a site that is protected from the root. If I disable anon access and then use ape to grant access, I get a login prompt and the page loads. When I navigate to a subfolder/page that is loading includes (not sure if its related) parts of the page don't load. I don't get errors in the browser but failed request logging is reporting 401 errors on certain pages. I can load that page specifically and it loads fine as long as I am authenticated on that page. I have turned off app and tried using windows auth and it works as expected and the pages all load normally. Any help is appreciated and let me know if you need anything else from me.

Thanks.

[Anton]

Hello,

Can you please show the Ape config you are using.
And have a look into Ape error.log for possible warning messages.

[jledhead Profile]

here is my ape config:
# Authentication type
AuthType Basic
# Name of area authentication will be used for (aka realm)
AuthName "secret area"
# Authentication provider. Here - mod_authn_file
AuthBasicProvider file
# Info for mod_authn_file - path to password file
AuthUserFile E:\websites\htpass\stage.htpass
# Access will be granted to all authenticated users
Require valid-user

the log doesn't show anything other than telling me the free license is being used.

[Anton]

Have you tried to make the logging more verbose by putting the following line into httpd.conf:

LogLevel debug

Also please try to make the 401 erro in browser more informative by disabling friendly error messages.

[jledhead Profile]

there isn't an error in the browser, it just doesn't load certain parts. I was able to use iis failed request logging to see it was generating an error. in the ape log this is what I get on the failed resource
4/17/2012 8:51:39 AM] [auth_basic_module] (8) [/SiteMapXml.asp] Authorization header not found

Everything else loads properly and here are the lines above and below where you can see it is authenticating everything else:

[4/17/2012 8:51:39 AM] [auth_basic_module] (8) [/stay/] auth provider: file
[4/17/2012 8:51:39 AM] [authz_user_module] (8) [/stay/] valid-user found
[4/17/2012 8:51:39 AM] [auth_basic_module] (8) [/stay/Default.asp] auth provider: file
[4/17/2012 8:51:39 AM] [authz_user_module] (8) [/stay/Default.asp] valid-user found
[4/17/2012 8:51:39 AM] [auth_basic_module] (8) [/SiteMapXml.asp] Authorization header not found
[4/17/2012 8:51:40 AM] [auth_basic_module] (8) [/!includes/css/int_styles.css] auth provider: file
[4/17/2012 8:51:40 AM] [authz_user_module] (8) [/!includes/css/int_styles.css] valid-user found
[4/17/2012 8:51:40 AM] [auth_basic_module] (8) [/!includes/css/print_styles.css] auth provider: file
[4/17/2012 8:51:40 AM] [authz_user_module] (8) [/!includes/css/print_styles.css] valid-user found

Thanks for your help

[Anton]

Hello,

This error "Authorization header not found" usually occurs when some other authorization is enabled.
Please check that you don't have any other types of authorization working for your site or parts of the site.

[jledhead Profile]

I did have anon enabled. disabled that and now it doesn't work at all. I get a 401 error in the browser and this in the ape log:
[4/18/2012 7:31:17 AM] [authn_file_module] (8) [/] AuthUserFile: E:\websites\htpass\stage.htpass
[4/18/2012 7:31:17 AM] [authn_file_module] (8) [/] user jledford added
[4/18/2012 7:31:17 AM] [authn_file_module] (8) [/] user websitebiz added
[4/18/2012 7:31:17 AM] [authn_file_module] (8) [/] user biltadmin added
[4/18/2012 7:31:17 AM] [auth_basic_module] (8) [/] Authorization header not found
[4/18/2012 7:31:21 AM] [auth_basic_module] (8) [/] auth provider: file

I am trying to protect the entire site with this and there is no other authentication in any other parts. Thanks for your help.

[Anton]

Hello,

Could you please specify what build of Ape you are using.
Also, please provide httpd.conf, web.config and applicationHost.config for investigation (it would be better if you created a ticket on our helpdesk http://support.helicontech.com/ and attached all these files there).

[jledhead Profile]

Ticket submitted. Thanks.

[lawyercentral Profile]

Experiencing the same issue as this post.

Did this issue ever get resolved? Any insights?