Yesterday I was working on polishing up some demos I will be using in my upcoming session at the Regional SharePoint Users Conference 2009 at the end of June and all of a sudden I was unable to authenticate to any of the SharePoint sites running in my VM except for Central Admin; I would get prompted for credentials (this was automatically propagating not too long ago) but would end up in an endless cycle getting nowhere fast. Looking at the difference between Central Admin and the other sites provides a clue to what was happening, I access the Central Admin site using the name of the server (DEMOSERVER in this case) but I access the other sites using FQDNs registered in a local DNS (such as staging.demo.local).  I recalled an email a colleague, Bob German, had recently sent out with the same issue which I had apparently deleted but luckily Ed Hild had a copy and indeed Bob’s fix worked for me.  So it seems an update was pushed down to my VM when I was converting over to run in Hyper-V (I enabled the extern NIC to get the latest SDK downloaded) and this update tightened security for loopback requests to FQDNs.  The fix for this is described in the KB article linked below.  If you are having some strange authentication issues for requests within the context of the same machine (I have seen others experience this issue with the search crawler and Forms Services) this may be the ticket.

You receive error 401.1 when you browse a Web site that uses Integrated Authentication and is hosted on IIS 5.1 or IIS 6

Basically there are two options, disable the loopback check or store each FQDN on the machine.  I experimented with adding each FQDN to the registry vs. simply disabling the loopback check but it appears wildcards are not supported (*.demo.local) and since I add new sites and FQDNs fairly regularly during demos this approach didn’t work for me.  Also, you will notice the KB does not reference Server 2008 or IIS 7 but the issue occurred and the fix worked for me in a Server 2008 environment

posted by chadwach 16 June 2009 in General

I have had good intention to start blogging for some time if for nothing else to help me build a reference of projects and interests I can refer back to over time.  I have gotten started a few times over the years but something else always seems to come up and I am ultimately sidetracked to more important matters and the discipline of posting in a timely fashion is quickly lost.  Case in point, I setup this blog over a year ago and after spending a good bit of time putting together a theme and tracking down add-ins never actually got around to posting anything.  A bit later I updated to the latest version of BlogEngine.NET but still nothing.  Well, I am going to give it another go.  I recently finished up two big projects, my MS in Software Engineering and conversion of our basement from a concrete cave into great hang-out pad, so I now have a bit more time on my hands.  The basement has been a big project and we still have a few items to finish up (we may never actually be completely done).  I plan some detailed postings for a few of the more interesting aspects of what we have done but I thought adding a few pictures here would be a good start. 

basement_1 IMG_4137 IMG_4139 IMG_4140

Hopefully this will not be the last post and I will be able to provide something of use to someone or at least a good reference library for myself.

Cheers!

About Me

Chad's Profile Pic I am a father, a husband, and a technology & DIY enthusiast. As for my day job, I am a Technology Architect at the Microsoft Technology Center (MTC) with a focus on helping customers and partners envision, design, and build collaborative solutions.

Month List