error '80070035' using WinNT provider

[Blake]

ASP code looks like this (win2k, IIS 5, Win2k AD):

<%
Set oUser = GetObject("WinNT://ourdomain/testuser")
response.write("user = " & oUser.Name)
%>

output is this:

error '80070035'
/cyphir/auth/test.asp, line 2

The .asp page is running as 'testuser'.

This works on our test domain, fails on production - please help if you can.

Blake

[Egbert Nierop \(MVP for IIS\)]

"Blake" <bl**********@NOSPAM.hotmail.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl...

ASP code looks like this (win2k, IIS 5, Win2k AD):
Does the code below, run as IUSR_ (anonymous) or does the user have to login
before...
<%
Set oUser = GetObject("WinNT://ourdomain/testuser")
response.write("user = " & oUser.Name)
%>

output is this:

error '80070035'
/cyphir/auth/test.asp, line 2

The .asp page is running as 'testuser'.

This works on our test domain, fails on production - please help if you can.
Blake

[Blake]

The user logs in first.

This script runs OK if I log in as a domain administrator. But if I log in
as myself it fails. Works fine on our test domain.

Blake

"Egbert Nierop (MVP for IIS)" <eg***********@nospam.invalid> wrote in
message news:OY***************@tk2msftngp13.phx.gbl...

"Blake" <bl**********@NOSPAM.hotmail.com> wrote in message
news:%2****************@tk2msftngp13.phx.gbl...

ASP code looks like this (win2k, IIS 5, Win2k AD):
Does the code below, run as IUSR_ (anonymous) or does the user have to

login before...

<%
Set oUser = GetObject("WinNT://ourdomain/testuser")
response.write("user = " & oUser.Name)
%>

output is this:

error '80070035'
/cyphir/auth/test.asp, line 2

The .asp page is running as 'testuser'.

This works on our test domain, fails on production - please help if you

can.

Blake

[Egbert Nierop \(MVP for IIS\)]

"Blake" <blake> wrote in message
news:eW**************@TK2MSFTNGP10.phx.gbl...

The user logs in first.

This script runs OK if I log in as a domain administrator. But if I log in as myself it fails. Works fine on our test domain.

That's clear...

A user has no rights, to query a domain controller using ADSI or WinNT. Give
users power user rights (not sure however) or delegate, that code inside a
separate COM+ component, which has admin rights. The component, should run
in it's own process...

--
compatible web farm Session replacement for Asp and Asp.Net
http://www.nieropwebconsult.nl/asp_session_manager.htm

[Kev]

Did you ever get to the bottom of this problem?.. I ask as I've got the same problem to sort out....any help appreciated

From http://www.developmentnow.com/g/62_2...T-provider.htm

Posted via DevelopmentNow.com Groups
http://www.developmentnow.com

[Twackster]

The reason for the error all boils down to Kerberos Authentication. Basically the Active Directory has not allowed Delegation to the Webserver Neither does it have a Trust in place.

I found this article on Microsoft very interesting to read.
http://www.microsoft.com/technet/com.../iisi0206.mspx

The Other Alternate is to use Ldap if the domain administrators feel that the trust / delegation route is a security issue.

From http://www.developmentnow.com/g/62_2...T-provider.htm

Posted via DevelopmentNow.com Groups
http://www.developmentnow.com