ConfigurationEr rorsException, Event Code 3008, system.web/identity

[Michael Schwarz]

Hi,

from time to time I get following error message with my ASP.NET 2.0 web
application in the event log: An error occurred executing the configuration
section handler for system.web/identity.

My web.config looks like this:

[...]
<authenticati on mode="Forms">
<forms name=".PcToppAu th" loginUrl="~/login.aspx" protection="All "
timeout="600"/>
</authentication>
<authorizatio n>
<deny users="?"/>
</authorization>
<identity impersonate="tr ue"/>
[...]

I'm running Windows 2003 Server with an anonymous account that will be
impersonated to access COM objects and network resources. By default the
same installation is running on a lot of Windows 2003 Servers but since some
days we are getting the error message above. In the event log I have
following message:

Event code: 3008
Event message: A configuration error has occurred.
Event time: 31-03-2006 08:19:27
Event time (UTC): 31-03-2006 06:19:27
Event ID: 16d39609ac64416 e9fc6bffd567f92 a2
Event sequence: 502
Event occurrence: 1
Event detail code: 0

Application information:
Application domain: /LM/W3SVC/2/Root-15-127882594863339 116
Trust level: Full
Application Virtual Path: /
Application Path: c:\xxxx\WebServ er\
Machine name: XXXXXX

Process information:
Process ID: 3956
Process name: w3wp.exe
Account name: NT AUTHORITY\NETWO RK SERVICE

Exception information:
Exception type: ConfigurationEr rorsException
Exception message: An error occurred executing the configuration section
handler for system.web/identity.

Request information:
Request URL: http://xxxxx/xxxx.aspx
Request path: /xxxx.aspx
User host address: 1.2.3.4
User:
Is authenticated: False
Authentication Type:
Thread account name: NT AUTHORITY\NETWO RK SERVICE

Thread information:
Thread ID: 11
Thread account name: NT AUTHORITY\NETWO RK SERVICE
Is impersonating: False
Stack trace: at
System.Configur ation.RuntimeCo nfigurationReco rd.GetRuntimeOb ject(Object
result)
at System.Configur ation.BaseConfi gurationRecord. Evaluate(Factor yRecord
factoryRecord, SectionRecord sectionRecord, Object parentResult, Boolean
getLkg, Boolean getRuntimeObjec t, Object& result, Object&
resultRuntimeOb ject)
at
System.Configur ation.BaseConfi gurationRecord. GetSectionRecur sive(String
configKey, Boolean getLkg, Boolean checkPermission , Boolean
getRuntimeObjec t, Boolean requestIsHere, Object& result, Object&
resultRuntimeOb ject)
at System.Configur ation.BaseConfi gurationRecord. GetSection(Stri ng
configKey, Boolean getLkg, Boolean checkPermission )
at System.Configur ation.BaseConfi gurationRecord. GetSection(Stri ng
configKey)
at System.Web.Conf iguration.Runti meConfig.GetSec tionObject(Stri ng
sectionName)
at System.Web.Conf iguration.Runti meConfig.GetSec tion(String sectionName,
Type type, ResultsIndex index)
at System.Web.Conf iguration.Runti meConfig.get_Id entity()
at System.Web.Clie ntImpersonation Context.Start(H ttpContext context,
Boolean throwOnError)
at System.Web.Http Application.OnT hreadEnter()
at System.Web.Http Application.Res umeSteps(Except ion error)


Any idea what I can do to find a solution to fix this problem?

Regards,
Michael

[Steven Cheng[MSFT]]

Hi Michael,

From your description, your certain ASP.NET application which configured to
use impersonate(imp ersonate the IIS's anonymous user) will randonly report
some "An error occurred executing the configuration section handler for
system.web/identity." error.

Based on my understanding, it is likely a environment specific problem.
Have you tried configure the ASP.NET worker process account to that
anonymous account instead of using impersoate to see whether the problem
occors? Also, since the error concerns with the configuration file, you can
try running filemon tool on the server to see whether there is any file
access permission issue.
Regards,

Steven Cheng
Microsoft Online Community Support
=============== =============== =============== =====

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no rights.

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

[Michael Schwarz]

Hi Steven,

"Steven Cheng[MSFT]" <st*****@online .microsoft.com> schrieb im Newsbeitrag
news:cV******** ******@TK2MSFTN GXA01.phx.gbl.. .

Hi Michael,

[...]
Based on my understanding, it is likely a environment specific problem.
Have you tried configure the ASP.NET worker process account to that
anonymous account instead of using impersoate to see whether the problem
you mean in machine.config or enter the username in the <identity> tag?

Regards,
Michael

occors? Also, since the error concerns with the configuration file, you
can
try running filemon tool on the server to see whether there is any file
access permission issue.
Regards,

Steven Cheng
Microsoft Online Community Support
=============== =============== =============== =====

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no
rights.

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)

[Steven Cheng[MSFT]]

Thanks for your response Michael,

No, I didn't mean the <identity > element in configuration file. I mean
changing the worker process's identity instead of using impersonate to see
whether it result to the same behavior.

Regards,

Steven Cheng
Microsoft Online Community Support
=============== =============== =============== =====

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=============== =============== =============== =====
This posting is provided "AS IS" with no warranties, and confers no rights.

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)