Microsoft KB Archive/300882

= MSXML 3.0 Running on Windows NT 4.0 Server Fails Windows 2000 NTLM Authentication =

Article ID: 300882

Article Last Modified on 11/15/2007

-

APPLIES TO


 * Microsoft XML Parser 3.0

-



This article was previously published under Q300882



SYMPTOMS
When you send a ServerXmlHttp request from Internet Information Server (IIS) 4.0 to Internet Information Services (IIS) 5.0, you may receive the following error message:

The login request was denied

This error occurs when all of the following conditions are met:
 * The computer that is running IIS 4.0 is also running Microsoft Windows NT 4.0 Server (or any service pack for Windows NT 4.0 Server).
 * The computer that is running IIS 4.0 is using Basic authentication.
 * The computer that is running IIS 5.0 is also running Microsoft Windows 2000 Server (or any service pack for Windows 2000 Server).
 * The security for the Web folder on the computer that is running IIS 5.0 is set to use Integrated Windows authentication.



CAUSE
XML and Windows NT 4.0 do not pass the NT LAN Manager (NTLM) security to Windows 2000, although the ServerXmlHttp script provides a userid and password, as follows: xh.Open &quot;GET&quot;, &quot;http://myserver/xmlweb/stuff.xml&quot;, False, _ &quot;myserver\administrator&quot;, &quot;admin_pwd&quot;



RESOLUTION
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains this hotfix.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

The English version of this fix should have the following file attributes or later:

  Date         Time   Version           Size  File name    Platform -  31-May-2001  15:50  8.10.8531.0  1,103,872  Msxml3.dll   x86 31-May-2001 15:48  8.10.8531.0     24,576  Msxml3a.dll  x86 31-May-2001 15:48  8.10.8531.0     44,032  Msxml3r.dll  x86 31-May-2001 15:49  6.0.2415.0      28,672  Xmlinst.exe  x86



WORKAROUND
To work around this problem, do not use Integrated Windows authentication on the computer that is running Windows 2000 Server and IIS 5.0. If you use Basic or Anonymous authentication, the computer that is running IIS 4.0 can retrieve the XML data, and Basic authentication still provides user security.



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.

Keywords: kbhotfixserver kbqfe kbprb kbqfe KB300882

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.