Authentication failure SP server 2007 using Host Headers
I'm hoping someone here can help me resolve this issue we are having with a new installation of SharePoint server 2007. We have SP2007 installed on a Windows 2008 Std server with IIS7. We can access all the sites fine using the server name/sites/sitename/default.asp. The boss wants to setup a Host Header called sharepoint to access the top site but its not working. 3 attempts to access the site using the domain\username and I receive this error. HTTP Error 401.1 Unauthorized. You do not have permission to view this directory or page using the credentials that you supplied. Module WindowsAuthenticationModule Notification AuthenticateRequest Handler AboMapperCustom-695784 Error Code 0xc000006d The AD account never locks out when the failed attempts happen. We are using Windows authentication in IIS. The IIS 7 web site is called SharePoint is using port 80. The Default site is there but not used and appears disabled. I have tried a number of things so far such as disabling the loopback adapter in the registry, adding the host headers in the registry as well as editing the bindings for the IIS site and even attempted the edit the web.config file to allow authentication to all domain users. Ive changed the authentication type to anonymous and nothing helps. We do have the correct DNS cname entered and it resolves correctly. I just dont know whats causing the issue and Im out of ideas. I appreciate any help you can provide here.
July 1st, 2009 5:06am

Is Alternete Access Mapping right configured? Have you tryed to see what happend when you open the site and logging it with a program like fiddler?
Free Windows Admin Tool Kit Click here and download it now
July 1st, 2009 5:15pm

I don't have any Alternete Access Mappings setup. Is that a requirement for using host headers.
July 1st, 2009 11:18pm

Yes, you have to have an AAM for any other URLs that you want to use to access a web application. When you created it initially, you let it default to the machine name instead of choosing a host header on port 80, so now you have to go add an AAM that references connects that host header URL with the proper web application. You cannot add it in IIS. In fact, never directly change IIS except for SSL certs. You make the change in SharePoint, and SharePoint will update IIS after writing the new info to the config database. Once you do this, it should authenticate fine.SharePoint Architect || My Blog
Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2009 5:23am

Thanks for the information. Tonight I'll remove the entry I placed in the IIS site bindings and add the AAM. I'll have to locate some good info on configuring AAM's so I can get familiar with all the requirements. I'm new to SPbut learning a lot right now.
July 2nd, 2009 8:27pm

AAM's are a fundamental concept that is critical to the success of SharePoint. I recommend not doing a lot of tampering with Central Admin until taking a class or reading a good book that covers this and many other fundamentals in great detail. It is not wise to be managing a real SharePoint environment without being intimiately knowledgeable on this topic. One of the most common reasons for failure in enterprise deployments of SP is not hiring a consultant or expert to architect and build the system initially.SharePoint Architect || My Blog
Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2009 8:33pm

Refer follow links: https://yagyashree.wordpress.com/2009/06/06/site-not-browse-able-with-host-header-401-1-error/ Or You receive error 401.1 when you browse a Web site that uses Integrated Authentication and is hosted on IIS 5.1 or IIS 6 http://support.microsoft.com/kb/896861 ======================== Click Start , click Run , type regedit , and then click OK . In Registry Editor, locate and then click the following registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa Right-click Lsa , point to New , and then click DWORD Value . Type DisableLoopbackCheck , and then press ENTER. Right-click DisableLoopbackCheck , and then click Modify . In the Value data box, type 1 , and then click OK . Quit Registry Editor, and then restart your computer. Visit: http://yagyashree.wordpress.com MCP & MCTS [WSS 3.0/MOSS]
July 3rd, 2009 3:19am

Thank You! Yagyashree! I have tried alot of things and been searching for a solution and only your method updating the registry worked like a Magic. It did not even require a restart but I will do one regardless. Thanks again, Bobby
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2010 12:08am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics