Re: Permission denied
Could there be a active directory issue? On 13/05/2010, at 11:24, Dylan Tusler dylan.tus...@sunshinecoast.qld.gov.au wrote: We've suddenly (this week) started getting Permission denied errors on some of our internal websites (page loads fine, but a little Error on page. appears in the bottom left corner, and behind it is a Permission Denied error. Some functionality doesn't work, specifically it appears to be choking on a JavaScript POST to another page on the same site.) Also, a number of users are reporting that they are being prompted to log in to web pages that previously never prompted for credentials. One site in particular is heavily affected, and looking at the site, I can't see anything having changed (no web.config changes, no permissions changes, etc.) I've looked at everything I can think of, including running ethereal traces and logging vast amounts of procmon logs. Nothing untoward appears that I can see. Can anyone take a stab at what might be going on? I'm just getting frustrated with it. Cheers Dylan Tusler --- --- --- --- --- --- --- --- --- -- To find out more about the Sunshine Coast Council, visit your local council office at Caloundra, Maroochydore, Nambour or Tewantin. Or, if you prefer, visit us on line at www.sunshinecoast.qld.gov.au This email, together with any attachments, is intended for the named recipient(s) only. Any form of review, disclosure, modification, distribution and or publication of this email message is prohibited without the express permission of the author. Please notify the sender immediately if you have received this email by mistake and delete it from your system. Unless otherwise stated, this email represents only the views of the sender and not the views of the Sunshine Coast Regional Council. maile 3_0_0
Re: Permission denied
That would be my first guess. Perhaps a service accounts cress have expired or an element of infrastructure has changed that prevent a previously successful auth. - Glav Sent from my iPhone On 13/05/2010, at 4:34 PM, Mark Kemper markkemp...@gmail.com wrote: Could there be a active directory issue? On 13/05/2010, at 11:24, Dylan Tusler dylan.tus...@sunshinecoast.qld.gov.au wrote: We've suddenly (this week) started getting Permission denied errors on some of our internal websites (page loads fine, but a little Error on page. appears in the bottom left corner, and behind it is a Permission Denied error. Some functionality doesn't work, specifically it appears to be choking on a JavaScript POST to another page on the same site.) Also, a number of users are reporting that they are being prompted to log in to web pages that previously never prompted for credentials. One site in particular is heavily affected, and looking at the site, I can't see anything having changed (no web.config changes, no permissions changes, etc.) I've looked at everything I can think of, including running ethereal traces and logging vast amounts of procmon logs. Nothing untoward appears that I can see. Can anyone take a stab at what might be going on? I'm just getting frustrated with it. Cheers Dylan Tusler --- --- --- --- --- --- --- --- --- --- --- To find out more about the Sunshine Coast Council, visit your local council office at Caloundra, Maroochydore, Nambour or Tewantin. Or, if you prefer, visit us on line at www.sunshinecoast.qld.gov.au This email, together with any attachments, is intended for the named recipient(s) only. Any form of review, disclosure, modification, distribution and or publication of this email message is prohibited without the express permission of the author. Please notify the sender immediately if you have received this email by mistake and delete it from your system. Unless otherwise stated, this email represents only the views of the sender and not the views of the Sunshine Coast Regional Council. maile 3_0_0
RE: Permission denied
I'm going to try fiddler next. Been messing with a larger procmon log of about 8million lines this morning trying to pinpoint something useful. However, the post is normal, not overlong. I've tried to manually reproduce the exact post (successfully) and run the target code manually too (which itself does an AD lookup, so I wanted to eliminate that as an issue) and it all works fine. It just gets the permission denied error when page 1 posts to page 2. Dylan. From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Jason Finch Sent: Friday, 14 May 2010 10:53 AM To: ozDotNet Subject: Re: Permission denied Have you fired up fiddler and see what the payload of the ajax post is? It could be something obscure like a too long url post (or a get not a post) Is the site posting/querying to another domain? could it be some sort of xss thing. (I know you said its posting to the same site, is it perhaps retrieving assets from another site/domain?) Have you tried another browser, the thinking is mayby if you are on IE, IE received a security patch that tightened some flaw or something which you may of relied on and can't no longer. Tying firefox/opera see if the result is the same. On Thu, May 13, 2010 at 3:54 PM, Dylan Tusler dylan.tus...@sunshinecoast.qld.gov.aumailto:dylan.tus...@sunshinecoast.qld.gov.au wrote: We've suddenly (this week) started getting Permission denied errors on some of our internal websites (page loads fine, but a little Error on page. appears in the bottom left corner, and behind it is a Permission Denied error. Some functionality doesn't work, specifically it appears to be choking on a JavaScript POST to another page on the same site.) - To find out more about the Sunshine Coast Council, visit your local council office at Caloundra, Maroochydore, Nambour or Tewantin. Or, if you prefer, visit us on line at www.sunshinecoast.qld.gov.au This email, together with any attachments, is intended for the named recipient(s) only. Any form of review, disclosure, modification, distribution and or publication of this email message is prohibited without the express permission of the author. Please notify the sender immediately if you have received this email by mistake and delete it from your system. Unless otherwise stated, this email represents only the views of the sender and not the views of the Sunshine Coast Regional Council. maile 3_0_0
Re: Permission denied
This may not directly help you with your current problem, mayby for future. ELMAH (http://code.google.com/p/elmah/) is also a great httpModule to have loaded to catch and alert to application exceptions in your web site. On a site I used to work for, we'd get the Yellow screen of deaths emailed everytime a page failed or even an ajax call died with the stacktrace, the http post variables and session variables listed. Very useful. On Fri, May 14, 2010 at 10:57 AM, Dylan Tusler dylan.tus...@sunshinecoast.qld.gov.au wrote: I'm going to try fiddler next.
RE: Permission denied
I've been running fiddler, and curiously there is no post or any other session recorded when the error occurs. Like browser permissions are preventing execution of the code at all. Dylan. From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Jason Finch Sent: Friday, 14 May 2010 10:53 AM To: ozDotNet Subject: Re: Permission denied Have you fired up fiddler and see what the payload of the ajax post is? It could be something obscure like a too long url post (or a get not a post) Is the site posting/querying to another domain? could it be some sort of xss thing. (I know you said its posting to the same site, is it perhaps retrieving assets from another site/domain?) Have you tried another browser, the thinking is mayby if you are on IE, IE received a security patch that tightened some flaw or something which you may of relied on and can't no longer. Tying firefox/opera see if the result is the same. On Thu, May 13, 2010 at 3:54 PM, Dylan Tusler dylan.tus...@sunshinecoast.qld.gov.aumailto:dylan.tus...@sunshinecoast.qld.gov.au wrote: We've suddenly (this week) started getting Permission denied errors on some of our internal websites (page loads fine, but a little Error on page. appears in the bottom left corner, and behind it is a Permission Denied error. Some functionality doesn't work, specifically it appears to be choking on a JavaScript POST to another page on the same site.) - To find out more about the Sunshine Coast Council, visit your local council office at Caloundra, Maroochydore, Nambour or Tewantin. Or, if you prefer, visit us on line at www.sunshinecoast.qld.gov.au This email, together with any attachments, is intended for the named recipient(s) only. Any form of review, disclosure, modification, distribution and or publication of this email message is prohibited without the express permission of the author. Please notify the sender immediately if you have received this email by mistake and delete it from your system. Unless otherwise stated, this email represents only the views of the sender and not the views of the Sunshine Coast Regional Council. maile 3_0_0
RE: Permission denied
I'm just looking through this: You say you have the little yellow triangle icon in IE? And when you double-click on this you get a Permission Denied error message in the explanatory dialogue? If so, this is a client-side issue: there is some permission denied on some javascript object or similar at the client-end. A server-side permission denied would have a HTTP 401 in the IIS log files. Cheers Ken From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Dylan Tusler Sent: Friday, 14 May 2010 9:39 AM To: 'ozDotNet' Subject: RE: Permission denied I've been running fiddler, and curiously there is no post or any other session recorded when the error occurs. Like browser permissions are preventing execution of the code at all. Dylan. From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Jason Finch Sent: Friday, 14 May 2010 10:53 AM To: ozDotNet Subject: Re: Permission denied Have you fired up fiddler and see what the payload of the ajax post is? It could be something obscure like a too long url post (or a get not a post) Is the site posting/querying to another domain? could it be some sort of xss thing. (I know you said its posting to the same site, is it perhaps retrieving assets from another site/domain?) Have you tried another browser, the thinking is mayby if you are on IE, IE received a security patch that tightened some flaw or something which you may of relied on and can't no longer. Tying firefox/opera see if the result is the same. On Thu, May 13, 2010 at 3:54 PM, Dylan Tusler dylan.tus...@sunshinecoast.qld.gov.aumailto:dylan.tus...@sunshinecoast.qld.gov.au wrote: We've suddenly (this week) started getting Permission denied errors on some of our internal websites (page loads fine, but a little Error on page. appears in the bottom left corner, and behind it is a Permission Denied error. Some functionality doesn't work, specifically it appears to be choking on a JavaScript POST to another page on the same site.) - To find out more about the Sunshine Coast Council, visit your local council office at Caloundra, Maroochydore, Nambour or Tewantin. Or, if you prefer, visit us on line at www.sunshinecoast.qld.gov.auhttp://www.sunshinecoast.qld.gov.au/ This email, together with any attachments, is intended for the named recipient(s) only. Any form of review, disclosure, modification, distribution and or publication of this email message is prohibited without the express permission of the author. Please notify the sender immediately if you have received this email by mistake and delete it from your system. Unless otherwise stated, this email represents only the views of the sender and not the views of the Sunshine Coast Regional Council. maile 3_0_0
RE: Permission denied
Yes, I think we've cracked it. Someone here in sysadmin has made a group policy change to one of the security settings regarding trusted sites, so our JavaScript was blatted. I think we'll be alright now. Furthermore, I can ditch my enormous procmon log too! Cheers, Dylan. From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Ken Schaefer Sent: Friday, 14 May 2010 11:50 AM To: ozDotNet Subject: RE: Permission denied I'm just looking through this: You say you have the little yellow triangle icon in IE? And when you double-click on this you get a Permission Denied error message in the explanatory dialogue? If so, this is a client-side issue: there is some permission denied on some javascript object or similar at the client-end. A server-side permission denied would have a HTTP 401 in the IIS log files. Cheers Ken From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Dylan Tusler Sent: Friday, 14 May 2010 9:39 AM To: 'ozDotNet' Subject: RE: Permission denied I've been running fiddler, and curiously there is no post or any other session recorded when the error occurs. Like browser permissions are preventing execution of the code at all. Dylan. From: ozdotnet-boun...@ozdotnet.com [mailto:ozdotnet-boun...@ozdotnet.com] On Behalf Of Jason Finch Sent: Friday, 14 May 2010 10:53 AM To: ozDotNet Subject: Re: Permission denied Have you fired up fiddler and see what the payload of the ajax post is? It could be something obscure like a too long url post (or a get not a post) Is the site posting/querying to another domain? could it be some sort of xss thing. (I know you said its posting to the same site, is it perhaps retrieving assets from another site/domain?) Have you tried another browser, the thinking is mayby if you are on IE, IE received a security patch that tightened some flaw or something which you may of relied on and can't no longer. Tying firefox/opera see if the result is the same. On Thu, May 13, 2010 at 3:54 PM, Dylan Tusler dylan.tus...@sunshinecoast.qld.gov.aumailto:dylan.tus...@sunshinecoast.qld.gov.au wrote: We've suddenly (this week) started getting Permission denied errors on some of our internal websites (page loads fine, but a little Error on page. appears in the bottom left corner, and behind it is a Permission Denied error. Some functionality doesn't work, specifically it appears to be choking on a JavaScript POST to another page on the same site.) - To find out more about the Sunshine Coast Council, visit your local council office at Caloundra, Maroochydore, Nambour or Tewantin. Or, if you prefer, visit us on line at www.sunshinecoast.qld.gov.auhttp://www.sunshinecoast.qld.gov.au/ This email, together with any attachments, is intended for the named recipient(s) only. Any form of review, disclosure, modification, distribution and or publication of this email message is prohibited without the express permission of the author. Please notify the sender immediately if you have received this email by mistake and delete it from your system. Unless otherwise stated, this email represents only the views of the sender and not the views of the Sunshine Coast Regional Council. maile 3_0_0 - To find out more about the Sunshine Coast Council, visit your local council office at Caloundra, Maroochydore, Nambour or Tewantin. Or, if you prefer, visit us on line at www.sunshinecoast.qld.gov.au This email, together with any attachments, is intended for the named recipient(s) only. Any form of review, disclosure, modification, distribution and or publication of this email message is prohibited without the express permission of the author. Please notify the sender immediately if you have received this email by mistake and delete it from your system. Unless otherwise stated, this email represents only the views of the sender and not the views of the Sunshine Coast Regional Council. maile 3_0_0
