This is definitely a bug in IIS 6.0 and DotNet Framework 2.0!

This am I posted the following message thinking there was a problem with Dot
Net Framework 2.0. But problem occurs only with Dot Net 2.0 and IIS 6.0
installed machines. I tested this on my laptop running 5.1 and Framework 2.0
and runs perfectly fine.
Can anyone from Microsoft help me. I have all our ASP.Net applications
converted 2.0 and Iam left hanging with this bug.
Jay
Hello,
We have a website running ASP.Net 1.1 using forms authentication and even
protects .htm/.doc files. We have associated such files to ASP.Net in
Application Settings.
Everything was working great until we moved to 2.0.
If we try to access a .htm page we get "Page cannot be displayed errror".
In the Application settings there are two check boxes "script engine" and
"verify that file exists" both are checked by default.
If the script engine check box is unchecked then it gives me "execute access
is
denied" error.
Why is this breaking change from 1.1 to 2.0, how do we resolve it?
Thanks.
Jay Balapa
www.atginc.comFor the request in question, what is being logged in the IIS logfile? Please
post the relevant entry/entries.
Thanks
Cheers
Ken
"Jay Balapa" <jbalapa@.atginc.com> wrote in message
news:eRJ$8MmFGHA.216@.TK2MSFTNGP15.phx.gbl...
: This am I posted the following message thinking there was a problem with
Dot
: Net Framework 2.0. But problem occurs only with Dot Net 2.0 and IIS 6.0
: installed machines. I tested this on my laptop running 5.1 and Framework
2.0
: and runs perfectly fine.
:
: Can anyone from Microsoft help me. I have all our ASP.Net applications
: converted 2.0 and Iam left hanging with this bug.
: Jay
:
:
:
: Hello,
:
: We have a website running ASP.Net 1.1 using forms authentication and even
: protects .htm/.doc files. We have associated such files to ASP.Net in
: Application Settings.
:
:
: Everything was working great until we moved to 2.0.
:
: If we try to access a .htm page we get "Page cannot be displayed errror".
: In the Application settings there are two check boxes "script engine" and
: "verify that file exists" both are checked by default.
:
:
: If the script engine check box is unchecked then it gives me "execute
access
: is
: denied" error.
:
: Why is this breaking change from 1.1 to 2.0, how do we resolve it?
:
: Thanks.
:
: --
: Jay Balapa
: www.atginc.com
:
:
:
:
Please first read this blog entry on troubleshooting.
http://blogs.msdn.com/david.wang/ar.../>
ooting.aspx
Realize that making random configuration changes prior to careful analysis
of the original error condition, as mentioned by the blog entry, does not
help your situation.
In your case, unchecking "Script Engine" does not help because it is the
means by which resources with Application Mappings can be executed when
Execute Permission is merely "Script" (which is the default setting). Don't
fiddle around with it nor the Execute Permission because... oh, just read
the blog entry for why.
:-)
So, please provide the log entry corresponding to the request which is
supposed to succeed but is not.
Now, since you are using non-standard configuration, also provide any
non-default Application mapping modifications as well as
web.config/machine.config modifications to make your current application
work.
In particular, are you seeing the failure on all content types mapped to
aspnet_isapi.dll or just .htm/.doc.
Since mapping non dot-net content to aspnet_isapi.dll to be protected by
Forms Authentication is not exactly the normal/default scenario, some things
actually did change on upgrade... But we need to first confirm your custom
configuration.
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Jay Balapa" <jbalapa@.atginc.com> wrote in message
news:eRJ$8MmFGHA.216@.TK2MSFTNGP15.phx.gbl...
> This am I posted the following message thinking there was a problem with
> Dot Net Framework 2.0. But problem occurs only with Dot Net 2.0 and IIS
> 6.0 installed machines. I tested this on my laptop running 5.1 and
> Framework 2.0 and runs perfectly fine.
> Can anyone from Microsoft help me. I have all our ASP.Net applications
> converted 2.0 and Iam left hanging with this bug.
> Jay
>
> Hello,
> We have a website running ASP.Net 1.1 using forms authentication and even
> protects .htm/.doc files. We have associated such files to ASP.Net in
> Application Settings.
>
> Everything was working great until we moved to 2.0.
> If we try to access a .htm page we get "Page cannot be displayed errror".
> In the Application settings there are two check boxes "script engine" and
> "verify that file exists" both are checked by default.
>
> If the script engine check box is unchecked then it gives me "execute
> access
> is
> denied" error.
> Why is this breaking change from 1.1 to 2.0, how do we resolve it?
> Thanks.
> --
> Jay Balapa
> www.atginc.com
>
>
Ken and David,
Thanks for replying to my post.
***************************************8
88
> So, please provide the log entry corresponding to the request which is
> supposed to succeed but is not.
****************************************
******88
Here are the log file entries- First entry is the aspx entry second is the
.htm entry not working.
2006-01-11 15:17:02 W3SVC1 10.0.0.32 POST /login.aspx - 80 - 10.0.0.163
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.
NET+CLR+1.0.3705;+.NET+CLR+2.0.50727)
302 0 0
2006-01-11 15:17:02 W3SVC1 10.0.0.32 GET /clients/vipdemo/gateway.htm - 80 -
10.0.0.163
Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;+.
NET+CLR+1.0.3705;+.NET+CLR+2.0.50727)
200 0 0
****************************************
****
> web.config/machine.config modifications to make your current application
> work.
****************************************
*******8
We just followed the default forms authentication guidelines, following are
the entries-
In the root folder this was the entry-
<system.web>
<sessionState mode="InProc" cookieless="true" />
<trace enabled="true" requestLimit="10" pageOutput="true"
traceMode="SortByTime" localOnly="true"/>
<authentication mode="Forms">
<forms loginUrl="login.aspx" protection="All" />
</authentication>
<customErrors mode="Off"/>
</system.web>
In the sub folder where we need protection we have this at the root-
<system.web>
<authorization>
<deny users="?"></deny>
</authorization>
</system.web>
****************************************
**************888
> In particular, are you seeing the failure on all content types mapped to
> aspnet_isapi.dll or just .htm/.doc.
****************************************
********************
Iam only seeing failure on mapped files like .htm/.doc. There are no issues
with aspx files. If I take the mapping off everything works great, but
files are not protected.
Thanks again for all your help.
jay Balapa
www.atginc.com

"David Wang [Msft]" <someone@.online.microsoft.com> wrote in message
news:OQpGhynFGHA.3000@.TK2MSFTNGP14.phx.gbl...
> Please first read this blog entry on troubleshooting.
> http://blogs.msdn.com/david.wang/ar...
shooting.aspx
> Realize that making random configuration changes prior to careful analysis
> of the original error condition, as mentioned by the blog entry, does not
> help your situation.
> In your case, unchecking "Script Engine" does not help because it is the
> means by which resources with Application Mappings can be executed when
> Execute Permission is merely "Script" (which is the default setting).
> Don't fiddle around with it nor the Execute Permission because... oh, just
> read the blog entry for why.
> :-)
> So, please provide the log entry corresponding to the request which is
> supposed to succeed but is not.
> Now, since you are using non-standard configuration, also provide any
> non-default Application mapping modifications as well as
> web.config/machine.config modifications to make your current application
> work.
> In particular, are you seeing the failure on all content types mapped to
> aspnet_isapi.dll or just .htm/.doc.
> Since mapping non dot-net content to aspnet_isapi.dll to be protected by
> Forms Authentication is not exactly the normal/default scenario, some
> things actually did change on upgrade... But we need to first confirm your
> custom configuration.
> --
> //David
> IIS
> http://blogs.msdn.com/David.Wang
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> //
> "Jay Balapa" <jbalapa@.atginc.com> wrote in message
> news:eRJ$8MmFGHA.216@.TK2MSFTNGP15.phx.gbl...
>
The log entry says that IIS handed the request to ASP.Net, so there is no
bug in IIS6 portion. I do not think there is a bug in the ASP.Net portion,
either, because I've used ASP.Net 2.0 to protect non-.Net content before
with no problems.
Is there anything in your .config file which prevents .htm or .doc from
being served by ASP.Net. In particular, what does your upgraded
machine.config look like for the httpHandler section -- is it actually
configured to serve the resources you are talking about.
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Jay Balapa" <jbalapa@.atginc.com> wrote in message
news:OGtEYRsFGHA.524@.TK2MSFTNGP09.phx.gbl...
> Ken and David,
> Thanks for replying to my post.
>
> ***************************************8
88
> ****************************************
******88
> Here are the log file entries- First entry is the aspx entry second is the
> .htm entry not working.
> 2006-01-11 15:17:02 W3SVC1 10.0.0.32 POST /login.aspx - 80 - 10.0.0.163
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;
+.NET+CLR+1.0.3705;+.NET+CLR+2.0.50727)
> 302 0 0
> 2006-01-11 15:17:02 W3SVC1 10.0.0.32 GET /clients/vipdemo/gateway.htm -
> 80 - 10.0.0.163
> Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1;+.NET+CLR+1.1.4322;
+.NET+CLR+1.0.3705;+.NET+CLR+2.0.50727)
> 200 0 0
>
>
> ****************************************
****
> ****************************************
*******8
> We just followed the default forms authentication guidelines, following
> are the entries-
> In the root folder this was the entry-
> <system.web>
> <sessionState mode="InProc" cookieless="true" />
> <trace enabled="true" requestLimit="10" pageOutput="true"
> traceMode="SortByTime" localOnly="true"/>
> <authentication mode="Forms">
> <forms loginUrl="login.aspx" protection="All" />
> </authentication>
> <customErrors mode="Off"/>
> </system.web>
> In the sub folder where we need protection we have this at the root-
> <system.web>
> <authorization>
> <deny users="?"></deny>
> </authorization>
> </system.web>
>
> ****************************************
**************888
> ****************************************
********************
> Iam only seeing failure on mapped files like .htm/.doc. There are no
> issues with aspx files. If I take the mapping off everything works great,
> but files are not protected.
> Thanks again for all your help.
> jay Balapa
> www.atginc.com
>
>
>
>
>
>
>
>
> "David Wang [Msft]" <someone@.online.microsoft.com> wrote in message
> news:OQpGhynFGHA.3000@.TK2MSFTNGP14.phx.gbl...
>