Microsoft KB Archive/265030

From BetaArchive Wiki
Knowledge Base


Article ID: 265030

Article Last Modified on 11/21/2006



APPLIES TO

  • Microsoft Internet Information Services 5.0
  • Microsoft Internet Information Server 4.0
  • Microsoft Internet Information Server 3.0
  • Microsoft Internet Information Server 2.0
  • Microsoft Internet Information Server 1.0



This article was previously published under Q265030

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

SYMPTOMS

When you try to access an intranet site by using the Netscape 4.51 browser, you may receive the following error message:

401.3 Unauthorized due to ACL on resource

When you try to access the same intranet site by using the Microsoft Internet Explorer browser, everything works as expected.

CAUSE

This problem may occur if you are using NTLM (NT challenge/response) or Integrated Windows authentication. The Netscape browser can only use Basic authentication.

WORKAROUND

Warning Using this procedure may make your username and password vulnerable to malicious users because Basic authentication is sent in clear text. You may want to add a certificate to implement Secure Sockets Layer (SSL).

To work around this problem, follow these steps.

  1. Start Microsoft Internet Information Services (IIS).
  2. Right-click the intranet site that you want, and then click Properties.
  3. Click the Directory Security tab.
  4. At Anonymous access an authentication control, click Edit.
  5. At Authenticated access, click to select the Basic authentication check box.


Note You also have to give the user account the Log on Locally right to allow Basic authentication.


MORE INFORMATION

For more information about how to resolve an issue where Netscape clients cannot access Web sites that use 128-bit SSL certificates, click the following article number to view the article in the Microsoft Knowledge Base:

260266 Netscape users cannot access Web pages with 128-bit certificate authentication


For more information about how to implement SSL in IIS 6.0 and in IIS 5.0, click the following article number to view the article in the Microsoft Knowledge Base:

299875 How to implement SSL in IIS


The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.


Additional query words: 401.3

Keywords: kbprb kbpending KB265030