Alias cannot be seen by same machine

[James Whitehead]

Hi all,

I hope someone can help me here.

Have a server running 2003 SP1 named TEST1

Have setup an alias in DNS called ALIASTEST1 pointing to TEST1

Have implemented the registry fix to disable strict name checking on the
server.

Every other machine can interact with ALIASTEST1

When I try to go to ALIASTEST1 from the TEST1 machine it asks me for login
credentials.

Please help!!

Regards

James

[techguy]

I percieve it to be a rights problem than anything else since it is able
to resolve the name but unable to get inside it.

--
techguy
------------------------------------------------------------------------
techguy's Profile: http://forums.techarena.in/member.php?userid=6552
View this thread: http://forums.techarena.in/showthread.php?t=153787
Visit - http://forums.techarena.in/archive/index.php/ | http://www.officehelp.in/index/index.php

[James Whitehead]

I am logged into the TEST1 box though
ie. From the TEST1 box
I do a \\test1 and it shows all shares
I do a \\aliastest1 and it prompts with a username and login for which no
username and password work.

Has me stumped.

"techguy" <techguy...@DoNotSpam.com> wrote in message
news:techguy...@DoNotSpam.com...

[Ace Fekay [MVP]]

James Whitehead wrote:
> I am logged into the TEST1 box though
> ie. From the TEST1 box
> I do a \\test1 and it shows all shares
> I do a \\aliastest1 and it prompts with a username and login for
> which no username and password work.
>
> Has me stumped.

This is because of the way IIS works and how it deals with NetBios names..
Test1 is the Netbios name and with NetBios names, IIS will use your logged
on access token (your current logged on credentials) for your credentials.
If you access the URL by any other method that forces it to resolve to an IP
address, then it doesn't know who you are and you'll need to provide your
credentials. The cname (alias) is resolving to an IP.

That's by default...

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Paramount: What's up with taking Enterprise off the air??
Infinite Diversities in Infinite Combinations.
=================================

[Ace Fekay [MVP]]

James Whitehead wrote:
> I am logged into the TEST1 box though
> ie. From the TEST1 box
> I do a \\test1 and it shows all shares
> I do a \\aliastest1 and it prompts with a username and login for
> which no username and password work.
>
> Has me stumped.

In addition, you'll have to check the website's properties in IIS to see how
you have authentication set (what default domain, if basic authentication is
set or not, etc).

Ace

[James Whitehead]

Thanks for the reply but IIS is not installed on this machine?

"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNa...@hotmail.com> wrote in
message news:uJPWCFb...@TK2MSFTNGP15.phx.gbl...

[Ace Fekay [MVP]]

James Whitehead wrote:
> Thanks for the reply but IIS is not installed on this machine?

You said you were connecting to a webserver thru IIS? I am assuming you are
connecting to an intranet server (IIS installed on some machine that you are
connecting to that is part of your domain). In that case it doesn't matter
if IIS is installed on your machine or not, but as I said, if you use the
NetBIOS name in the URL to connect to whatever webserver you are connecting
to in your organization, it will use your logged-on credentials (your
current access token). If you connect by any other means that resolves to an
IP, then it will prompt you.

That is default.

Ace

[James Whitehead]

Thanks for the reply Ace however I think you must have misunderstood. I
didn't actually mention connection through a webserver. I am connecting via
NetBIOS names to shares not through IIS. I have found out a recent thing
however, this problem does not occur without SP1 installed, it is only a
problem with SP1.

Regards

"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNa...@hotmail.com> wrote in

message news:u9hYVwIY...@TK2MSFTNGP14.phx.gbl...

[Ace Fekay [MVP]]

James Whitehead wrote:
> Thanks for the reply Ace however I think you must have misunderstood.
> I didn't actually mention connection through a webserver. I am
> connecting via NetBIOS names to shares not through IIS. I have found
> out a recent thing however, this problem does not occur without SP1
> installed, it is only a problem with SP1.
>
> Regards

I apologize for the misinterpreatation.

Can you post the info that you found out about this behavior please, such as
the URL for the info? Is it a Microsoft tech article?

Thanks
Ace

[James Whitehead]

I only found this by testing. I have found a solution to the problem
however...

1. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

2. Add Value
Value name: DisableLoopbackCheck
Data type: REG_DWORD
Type: Decimal
Value: 1

Regards
"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNa...@hotmail.com> wrote in

message news:%23LfXcma...@TK2MSFTNGP15.phx.gbl...

[Ace Fekay [MVP]]

James Whitehead wrote:
> I only found this by testing. I have found a solution to the problem
> however...
>
> 1. Locate the following key in the registry:
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
>
> 2. Add Value
> Value name: DisableLoopbackCheck
> Data type: REG_DWORD
> Type: Decimal
> Value: 1
>
> Regards

Thanks for posting that.

James, see if this applies:

281308 - Connecting to SMB Share on a Windows 2000-Based Server May Not Work
with an Alias Name [Doesn't work with CNAMES]:
http://support.microsoft.com/?id=281308

Ace