HTTP 401.3 - Access denied by ACL on resource

[Jackson Rhodes]

I get the following message when I try to view my IIS site with Mozilla 1.1 and Netscape 6.2

You are not authorized to view this page
You do not have permission to view this directory or page using the credentials you supplied.

HTTP 401.3 - Access denied by ACL on resource.

Does anyone know a solution for this very frustrating problem?

Thnaks

[Richard Darling]

It has to be a permission issue on your IIS server. If the server is yours check the access permissions for IIS. If it is offsite contact your ISP and have them correct it. I have our site hosted by a third-party and we had the same problem. They corrected it immediately when I contacted them. RD

[Jon Finley]

Richard's correct. Check file level permissions on the document/file you are trying to acess.


Also.... by default the browsers will try to log you in anonymously, rather than allow a prompting for password. If you've locked down the file (restricted to a single user ID or group) then you want the browser to prompt for a password.


Jon

[Jackson Rhodes]

I know it's not the permissions because I set them all as open as possible and I can view my IIS pages in I.E.

?????

[Jon Finley]

Ok... the problem IS with NEtscape and HOW it tries to log you on to the resource.

Netscape can't do NTLM (NT challenge/response) or Windows Integrated authentication, it can only do basic.

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q265030

You might want to see if this has changed with the latest/greatest version.

Jon

[Paul Garbutt]

I get something similar, only it depends on browser version and firewalls.

If we use IE5.0, then we get the 401.3 error without a logon screen, no matter if it is behind a firewall or not.

If we use IE5.5 upwards (through the firewall), then we get the desired logon window with U/N, P/W and domain.

If we use IE6 on Win XP without a firewall, we get the more user-friendly U/N and P/W screen (no need to add domain info).

The folder/file in question is secured by denying access to IUSR and adding the required security group to the list. Nothing too serious at all!

Now can anyone explain THAT?!

ps - I haven't tried Netscape yet either through a firewall or not.