469,306 Members | 1,896 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,306 developers. It's quick & easy.

error '80070035' using WinNT provider

ASP code looks like this (win2k, IIS 5, Win2k AD):

<%
Set oUser = GetObject("WinNT://ourdomain/testuser")
response.write("user = " & oUser.Name)
%>

output is this:

error '80070035'
/cyphir/auth/test.asp, line 2

The .asp page is running as 'testuser'.

This works on our test domain, fails on production - please help if you can.

Blake
Jul 19 '05 #1
5 9923
"Blake" <bl**********@NOSPAM.hotmail.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl...
ASP code looks like this (win2k, IIS 5, Win2k AD):
Does the code below, run as IUSR_ (anonymous) or does the user have to login
before...
<%
Set oUser = GetObject("WinNT://ourdomain/testuser")
response.write("user = " & oUser.Name)
%>

output is this:

error '80070035'
/cyphir/auth/test.asp, line 2

The .asp page is running as 'testuser'.

This works on our test domain, fails on production - please help if you can.
Blake


Jul 19 '05 #2
The user logs in first.

This script runs OK if I log in as a domain administrator. But if I log in
as myself it fails. Works fine on our test domain.

Blake

"Egbert Nierop (MVP for IIS)" <eg***********@nospam.invalid> wrote in
message news:OY***************@tk2msftngp13.phx.gbl...
"Blake" <bl**********@NOSPAM.hotmail.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl...
ASP code looks like this (win2k, IIS 5, Win2k AD):
Does the code below, run as IUSR_ (anonymous) or does the user have to

login before...
<%
Set oUser = GetObject("WinNT://ourdomain/testuser")
response.write("user = " & oUser.Name)
%>

output is this:

error '80070035'
/cyphir/auth/test.asp, line 2

The .asp page is running as 'testuser'.

This works on our test domain, fails on production - please help if you

can.

Blake

Jul 19 '05 #3
"Blake" <blake> wrote in message
news:eW**************@TK2MSFTNGP10.phx.gbl...
The user logs in first.

This script runs OK if I log in as a domain administrator. But if I log in as myself it fails. Works fine on our test domain.


That's clear...

A user has no rights, to query a domain controller using ADSI or WinNT. Give
users power user rights (not sure however) or delegate, that code inside a
separate COM+ component, which has admin rights. The component, should run
in it's own process...

--
compatible web farm Session replacement for Asp and Asp.Net
http://www.nieropwebconsult.nl/asp_session_manager.htm

Jul 19 '05 #4
Kev
Did you ever get to the bottom of this problem?.. I ask as I've got the same problem to sort out....any help appreciated

From http://www.developmentnow.com/g/62_2...T-provider.htm

Posted via DevelopmentNow.com Groups
http://www.developmentnow.com
Jul 22 '05 #5
The reason for the error all boils down to Kerberos Authentication. Basically the Active Directory has not allowed Delegation to the Webserver Neither does it have a Trust in place.

I found this article on Microsoft very interesting to read.
http://www.microsoft.com/technet/com.../iisi0206.mspx

The Other Alternate is to use Ldap if the domain administrators feel that the trust / delegation route is a security issue.

From http://www.developmentnow.com/g/62_2...T-provider.htm

Posted via DevelopmentNow.com Groups
http://www.developmentnow.com
Nov 23 '06 #6

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

1 post views Thread by Mahesh Hardikar | last post: by
1 post views Thread by elziko | last post: by
4 posts views Thread by Thomaz | last post: by
6 posts views Thread by Rich Crusco via DotNetMonster.com | last post: by
1 post views Thread by CARIGAR | last post: by
reply views Thread by zhoujie | last post: by
reply views Thread by suresh191 | last post: by
reply views Thread by harlem98 | last post: by
1 post views Thread by Geralt96 | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.