[Zope] IE Auth failures, NS works fine

Mon, 08 May 2000 12:55:12 -0400

Richard Moon wrote:
> 
> Under Internet Options, Security I run under the Internet web content zone.
> ...

Thanks for this info. It should help me verify that we are all in tha
same pile on the IE side. I found the following at
http://www.geocrawler.com/archives/3/192/1999/9/0/

It seems that there is some trouble with Apache but I'm not sure how
this will relate to Zope and further to GUF and the way GUF generates an
Auth error. Any ideas would be appreciated.

> Hi I`m running Apache 1.3.6 on an old SUN OS 4.1.3 machine. Everything
> thing has been running fine for years (with previouse versions of Apache,
> actually this problem forced us to try an upgrade, but no dice). My problem
> is that I can not get IE5 to authenticate into a passwd protected page,
> I don`t get the dialogue box that allows me to enter my login and passwd,
> it just sends me a webserver error generated page saying "
> "Error: 401
> Browser not authentication-capable or authentication failed. If you saw
> a password dialog box, check your valid username and password and try again.
> If you did not see a password dialog box, then your browser does not support
> passwords and must be replaced with one that does." These are pages that
> are just using .htaccess. I have tried a ton of stuff from lowering (and
> customizing) my internet security levels, to dissabling hhtp 1.1 and SSL
> 2.0, 3.0 etc. I also tried new configurations with Apache itself changing
> "AllowOverride" to All and AuthConfig. We have tested it from inside the
> LAN and outside. We also run another Apache server 1.3 on our intranet
> and and also get nothing but the error message page. I have tested IE5
> on a site that runs an older NCSA server and that site works fine.
> We are behind a firewall but that has never been a problem. The funny thing
> is IE 4.0 works fine and all versions of Netscape work fine too. The Microsoft
> site is useless as always (I also emailed them and got a reply they would
> pass my problem on to the appropriate Microsoft group for review and response,
> but that was 2 weeks ago now) and I have posted this question on both newsgroups
> suggested and no one has been able to help (yet others seem to be having
> similar problems, been there 2 weeks). I have also reviewed the know client
> problems and tried stuff listed for IE4, but nothing. I am sorry but I
> have exausted my sources of possible information, can you help.

... and the reply...

>  Thank you Marc;
> I do have a customized script for error responses, it has always worked so
> I did not think of looking at it again. I commented out my ErrorDocument
> directive and it worked. I will rewrite my script, but now I at least know
> where the problem is. 
> Again thanx a bunch!
> -James 
>             
> At 01:09 AM 09/29/1999 , you wrote:
>>Synopsis: IE5 authentication problem
>>
>>State-Changed-From-To: open-feedback
>>State-Changed-By: marc
>>State-Changed-When: Tue Sep 28 21:09:37 PDT 1999
>>State-Changed-Why:
>>Your server is generating an invalid header, and IE is
>>well within its rights to say "what the heck?"
>>
>>Note:
>>
>>marcs@alive:~$ telnet http://www.bbsr.edu 80
>>Trying 209.27.142.148...
>>Connected to w3.bbsr.edu.
>>Escape character is `^]`.
>>GET /rpi/climate/WGactivities/wghome.html HTTP/1.0
>>
>>HTTP/1.0 401
>>Server: Apache/1.3.6 (Unix)
>><BODY BGCOLOR="#FFFFFF"><H2>BBSR World-Wide-Web Service</H2>
>>WWW-Authenticate:
>>
>><HEAD><TITLE>BBSR WWW Service: 401</TITLE></HEAD>
>>[...]
>>How are you generating this page?  Do you have any ErrorDocument
>>directives setup?  If so, what do they point to?  They probably point to a 
>>broken script or something.