473,385 Members | 1,798 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,385 software developers and data experts.

Unable to open the Web...You are not authorized to perform the current operation

I'm getting the error: "Unable to open the Web 'http://blah/blahblah'.
You are not authorized to perform the current operation". I have
changed a few things recently but I can't change them back as I need
them. I can't find anything about it using searches.

Yesterday, I removed the "Enable anonymous access" option from my web
(within the Default Web Site). The web has Integrated Windows
authentication checked. The site must check AD group membership so I
need these options set like this. (It runs with a particular AppPool
which uses a network account.)

Immediately afterwards, when I tried to access a page on the site the
User name/Password authentication pane appeared - this wasn't
happening before. A bit of research revealed that a site set up like
this needs an SPN. The server itself had two, one with the netbios
name and one with the fully qualified DNS name. So, I set up two for
the AppPool account. After this, when I tried to access the page, I
didn't get the authentication panel. So far, so good.

However, today I decided to tweak a page, so I went to open up the
site in VS2005 and got the User name/Password authentication pane - I
tried my ID (which is a member of Administrators on the server) and it
didn't work - the pane reappeared. When I clicked cancel I got this
error: "Unable to open the Web 'http://blah'. You are not authorized
to perform the current operation"

Any suggestions?

(The server is 2003 R2, patched to recent.)

Aug 1 '07 #1
3 4280
On Aug 1, 2:51 pm, ssg31415926 <newsjunkm...@gmail.comwrote:
I'm getting the error: "Unable to open the Web 'http://blah/blahblah'.
You are not authorized to perform the current operation". I have
changed a few things recently but I can't change them back as I need
them. I can't find anything about it using searches.

Yesterday, I removed the "Enable anonymous access" option from my web
(within the Default Web Site). The web has Integrated Windows
authentication checked. The site must check AD group membership so I
need these options set like this. (It runs with a particular AppPool
which uses a network account.)

Immediately afterwards, when I tried to access a page on the site the
User name/Password authentication pane appeared - this wasn't
happening before. A bit of research revealed that a site set up like
this needs an SPN. The server itself had two, one with the netbios
name and one with the fully qualified DNS name. So, I set up two for
the AppPool account. After this, when I tried to access the page, I
didn't get the authentication panel. So far, so good.

However, today I decided to tweak a page, so I went to open up the
site in VS2005 and got the User name/Password authentication pane - I
tried my ID (which is a member of Administrators on the server) and it
didn't work - the pane reappeared. When I clicked cancel I got this
error: "Unable to open the Web 'http://blah'. You are not authorized
to perform the current operation"

Any suggestions?

(The server is 2003 R2, patched to recent.)
What permissions do you have on the directory where the website is
located?

Aug 1 '07 #2
My account is a member of local Administrators on the server (one of
many things I had to do to get remote debugging working). It has Full
Control over the folder. I've checked the individual files and the
Full Control permissions are inherited. I can access the pages using
a browser, I just can't edit the site.

I did have a Kerberos problem for a while but resetting the server's
SPN seems to have fixed it - at least, there are now no error messages
in the event log on restarting the server.

On 1 Aug, 20:27, Alexey Smirnov <alexey.smir...@gmail.comwrote:
On Aug 1, 2:51 pm, ssg31415926 <newsjunkm...@gmail.comwrote:
I'm getting the error: "Unable to open the Web 'http://blah/blahblah'.
You are not authorized to perform the current operation". I have
changed a few things recently but I can't change them back as I need
them. I can't find anything about it using searches.
Yesterday, I removed the "Enable anonymous access" option from my web
(within the Default Web Site). The web has Integrated Windows
authentication checked. The site must check AD group membership so I
need these options set like this. (It runs with a particular AppPool
which uses a network account.)
Immediately afterwards, when I tried to access a page on the site the
User name/Password authentication pane appeared - this wasn't
happening before. A bit of research revealed that a site set up like
this needs an SPN. The server itself had two, one with the netbios
name and one with the fully qualified DNS name. So, I set up two for
the AppPool account. After this, when I tried to access the page, I
didn't get the authentication panel. So far, so good.
However, today I decided to tweak a page, so I went to open up the
site in VS2005 and got the User name/Password authentication pane - I
tried my ID (which is a member of Administrators on the server) and it
didn't work - the pane reappeared. When I clicked cancel I got this
error: "Unable to open the Web 'http://blah'. You are not authorized
to perform the current operation"
Any suggestions?
(The server is 2003 R2, patched to recent.)

What permissions do you have on the directory where the website is
located?

Aug 2 '07 #3
It's definitely to do with the SPNs: I deleted the two SPNs I added
the other day and the problem reverted back to the original: IE asked
for credentials but refused to accept them, VS2005 didn't ask for
creds and successfully accessed the site.

Then I added back the SPN (using SETSPN -A http/fqdn.of.server
NetBIOSDomainName\AccountName) and the problem swapped back: IE didn't
ask for creds and successfully accessed the site, VS2005 asked for
credentials but refused to accept them.

So, it's something to do with the Service Principal Name, but what?

On Aug 2, 3:26 pm, ssg31415926 <newsjunkm...@gmail.comwrote:
My account is a member of local Administrators on the server (one of
many things I had to do to get remote debugging working). It has Full
Control over the folder. I've checked the individual files and the
Full Control permissions are inherited. I can access the pages using
a browser, I just can't edit the site.

I did have a Kerberos problem for a while but resetting the server's
SPN seems to have fixed it - at least, there are now no error messages
in the event log on restarting the server.

On 1 Aug, 20:27, Alexey Smirnov <alexey.smir...@gmail.comwrote:
On Aug 1, 2:51 pm,ssg31415926<newsjunkm...@gmail.comwrote:
I'm getting the error: "Unable to open the Web 'http://blah/blahblah'.
You are not authorized to perform the current operation". I have
changed a few things recently but I can't change them back as I need
them. I can't find anything about it using searches.
Yesterday, I removed the "Enable anonymous access" option from my web
(within the Default Web Site). The web has Integrated Windows
authentication checked. The site must check AD group membership so I
need these options set like this. (It runs with a particular AppPool
which uses a network account.)
Immediately afterwards, when I tried to access a page on the site the
User name/Password authentication pane appeared - this wasn't
happening before. A bit of research revealed that a site set up like
this needs an SPN. The server itself had two, one with the netbios
name and one with the fully qualified DNS name. So, I set up two for
the AppPool account. After this, when I tried to access the page, I
didn't get the authentication panel. So far, so good.
However, today I decided to tweak a page, so I went to open up the
site in VS2005 and got the User name/Password authentication pane - I
tried my ID (which is a member of Administrators on the server) and it
didn't work - the pane reappeared. When I clicked cancel I got this
error: "Unable to open the Web 'http://blah'. You are not authorized
to perform the current operation"
Any suggestions?
(The server is 2003 R2, patched to recent.)
What permissions do you have on the directory where the website is
located?

Aug 3 '07 #4

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: Srinivasan Vasudevan via DotNetMonster.com | last post by:
Dear All, I am having windows 2003 server as Operation System and iam using Visual Studio .NET 2003, my problem is if i open the ASP.NET project the application showing the below given error. ...
3
by: purkka | last post by:
Hi I replaced a Win 2000 Adv server to the Win 2003 Std with Front Page Server Extension and .Net Framework 2.0. FPSE is extended to Default Web Site. Visual Studio 2005: If I create a new web...
0
by: Seok Bee | last post by:
Dear Experts, In my web application, I'm having a button to view an attachment. After I retrieve the record from database (Ms. Access), I have a button to view the attachment (if there is any)....
6
by: Seok Bee | last post by:
Dear Experts, In my web application, I'm having a button to view an attachment. After I retrieve the record from database (Ms. Access), I have a button to view the attachment (if there is any)....
0
by: bazzer | last post by:
hey, im trying to access a microsoft access database from an ASP.NET web application in visual basic 2003.NET. i get the following error when i try running it: Server Error in...
0
by: Steven Bolard | last post by:
Hello, I am trying to port my .net 1.1 application to 2.0. I am using vs2005. I am trying to get my webservices to run and although i can compile them and and get wsdl and service descriptions...
0
by: Buddy Home | last post by:
Hello, I'm trying to upload a file programatically and occasionally I get the following error message. Unable to write data to the transport connection: An established connection was aborted...
3
by: Buddy Home | last post by:
Hello, I'm trying to upload a file programatically and occasionally I get the following error message. Unable to write data to the transport connection: An established connection was aborted...
3
by: aydeejay | last post by:
I'm trying to troubleshoot an issue where users are not able to bind with LDAP via "GetObject" through our ASP Classic Intranet if they stay logged in overnight (beyond their allowed login hours). ...
0
by: aa123db | last post by:
Variable and constants Use var or let for variables and const fror constants. Var foo ='bar'; Let foo ='bar';const baz ='bar'; Functions function $name$ ($parameters$) { } ...
0
by: ryjfgjl | last post by:
If we have dozens or hundreds of excel to import into the database, if we use the excel import function provided by database editors such as navicat, it will be extremely tedious and time-consuming...
0
by: ryjfgjl | last post by:
In our work, we often receive Excel tables with data in the same format. If we want to analyze these data, it can be difficult to analyze them because the data is spread across multiple Excel files...
0
by: emmanuelkatto | last post by:
Hi All, I am Emmanuel katto from Uganda. I want to ask what challenges you've faced while migrating a website to cloud. Please let me know. Thanks! Emmanuel
1
by: nemocccc | last post by:
hello, everyone, I want to develop a software for my android phone for daily needs, any suggestions?
0
by: Hystou | last post by:
There are some requirements for setting up RAID: 1. The motherboard and BIOS support RAID configuration. 2. The motherboard has 2 or more available SATA protocol SSD/HDD slots (including MSATA, M.2...
0
marktang
by: marktang | last post by:
ONU (Optical Network Unit) is one of the key components for providing high-speed Internet services. Its primary function is to act as an endpoint device located at the user's premises. However,...
0
by: Hystou | last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can...
0
Oralloy
by: Oralloy | last post by:
Hello folks, I am unable to find appropriate documentation on the type promotion of bit-fields when using the generalised comparison operator "<=>". The problem is that using the GNU compilers,...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.