Server 4: Local user can't access restricted website

Hello.
One of our locally hosted websites (LAN-only) is set up to require restricted access via OS X Server's "Access Group" setting. It contains a number of OD-based users and a single local user (the machine's admin user). All OD-based users can access the website (after supplying their credentials), but the single local user can't (keeps rejecting the credentials). This worked fine for this user under 10.9 Server—the issue has only been introduced after the 10.10 upgrade.
The only thing I'm able to find in the logs is:
[Thu Oct 23 13:03:23.125136 2014] [apple_digest:error] [pid 1971] [client XXX.XXX.XXX.XXX:XXXXX] Access to / failed, reason: user 'XXX' does not meet 'require'ments for user to be allowed access
[Thu Oct 23 13:03:23.125276 2014] [authz_core:error] [pid 1971] [client XXX.XXX.XXX.XXX:XXXXX] AH01631: user XXX: authorization failure for "/":
I've confirmed the correct credentials being used (as it's the same user used to physically access the server itself).
Anyone have any ideas what might be wrong?
Thanks,
Kristin.

I opted to use ".com.na" in which case the Internal Domain Name and Internet Website
now has the same name.
This ends up with a split-DNS stup for internal and external resolution which requires extra administration tasks and attention from the administrators.
When attempting to open the extarnal website eg. "www.company.com.na" from a client PC within the internal "company.com.na" Domain, I keep getting error "403 - Forbidden: Access is denied. You do not have permission to view
this directory or page using the credentials that you supplied."
I should also mention, the website is hosted by an ISP and not locally.
I added a "www" Host record in the Forward Lookup Zone, I have added the url and ip address to the Hosts file on a client pc (Windows 7) and even tried setting up Split-Brains DNS. Nothing seems to work.
Running a Tracert takes me to the correct public ip address of the website, but I keep getting this 403 error.
This means that you are able to reach the Website but it is responding with the access denied error message. That should be checked on the middleware level so if this is IIS running then I would recommend asking them in IIS forum: http://forums.iis.net/
If this is a Website that is completely managed by your ISP then I would recommend checking with them.
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Similar Messages

Other user can't access to OBIEE 11G installed on a server

Hello,
We have installed OBIEE 11G on a server ( windows sever 2008 r2) with admin account, and it works fine, But others users can't access to obiee 11g ( administration icons are white in their sessions) even they have admin rights.
Can anyone tell me what should we do??
Thank you.

Hi,
This is the exact format how my tnsnames.ora file looks. sorry, I can ping it in command prompt now. In my connection pool i tried first DSN = ab.bc.xy.zx, did not work. Then I saw oracle's default repository and changed my DSN to your suggested format starting from "DESCRPTION" to rest. Still no luck Do you think, i should put the same TNS in my local machine??
ab.bc.xy.zx =
(DESCRIPTION =
    #(ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.110)(PORT = 1521))
    #(ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.120)(PORT = 1521))
    (ADDRESS = (PROTOCOL = TCP)(HOST = 10.20.30.130)(PORT = 1521))
    (LOAD_BALANCE = yes)
    (CONNECT_DATA =
      (SERVER = DEDICATED)
      (SID = cap2)
thanks,
BK.

SQL 2012 R2 - SSRS with the Report Server Web Service URL, can't access

Hello:
I am installing Dynamics CRM 2013. When I am on RS Configuration manager; I am running into the SSRS (SQL 2012 on Server 2012)SQL issue, can't access the
http://servername/:80/ReportsServer or
http://servername/:Reports web pages
The database server has SSRS native mode installed, it is using a domain account for the service credentials. This account also has permission to log on a service in the GPO
Account is a domain admin and is a local administrator
SQL server is 2012 R2 on Windows Server 2012. User base is less than 60 people and they have SharePoint 13 on the same SQL server. Server more than enough resources.
Any assistance would be appreciated.
Thanks..Dan

Hi DCas1,
According to your description, you could not access
http://servername/:80/ReportsServer or http://servername/:Reports web pages from Reporting Services configuration manager, SSRS in configured in native mode and the account you used is a local administrator.
In Reporting Services, URLs are used to access the Report Server Web service and Report Manager. Before we can use either application, we need to configure at least one URL each for the Web service and Report Manager. If we are using the Reporting Services
Configuration tool to create or modify the URLs, we can accept the default values for a URL or specify custom values. When we create a report server URL, we must specify the following parts: Host name, port and Virtual directory. In order to improve the efficiency
of troubleshooting, I need to ask several questions:
Since the default URL is http://<computername>/reportserver, did you type the URLs manually? or the URLs configured in Reporting Services configuration manager are
http://servername/:80/ReportServer and
http://servername/:Reports?
Could you provide detailed information of error log(default location: %programfiles%\Microsoft SQL Server\MSRS11.MSSQLSERVER\Reporting Services\LogFiles)?
For more information about Configuring a URL, please refer to the following documents:
http://msdn.microsoft.com/en-us/library/ms159261(v=sql.110).aspx
http://msdn.microsoft.com/en-us/library/bb630447(v=sql.110).aspx
If you have any more questions, please feel free to ask.
Thanks,
Wendy Fu

SQL Server reporting server 2005 having error. 'The report server is not responding. Verify that report server is running and can be accessed from this computer'

Hi team,
I got below error message in SQL Server 2005 reporting service.
''The report server is not responding. Verify that report server is running and can be accessed from this computer'
also in reports, i am getting below error:
"The encrypted value for the "LogonCred" configuration setting cannot be decrypted. (rsFailedToDecryptConfigInformation)
Get Online Help
The report server has encountered a configuration error. See the report server log files for more information. (rsServerConfigurationError)
Get Online Help "
Please find below log:
<Header>
<Product>Microsoft SQL Server Reporting Services Version 9.00.4060.00</Product>
<Locale>en-US</Locale>
<TimeZone>Eastern Daylight Time</TimeZone>
<Path>F:\Program Files\Microsoft SQL Server\MSSQL.6\Reporting Services\LogFiles\ReportServer__07_28_2014_09_08_41.log</Path>
<SystemName>MFLDDDBS04</SystemName>
<OSName>Microsoft Windows NT 5.2.3790 Service Pack 2</OSName>
<OSVersion>5.2.3790.131072</OSVersion>
</Header>
w3wp!webserver!1!7/28/2014-09:08:41:: i INFO: Reporting Web Server started
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing ConnectionType to '1' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing IsSchedulingService to 'True' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing IsNotificationService to 'True' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing IsEventService to 'True' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing PollingInterval to '10' second(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing WindowsServiceUseFileShareStorage to 'False' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing MemoryLimit to '60' percent as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing RecycleTime to '720' minute(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing MaximumMemoryLimit to '80' percent as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing MaxAppDomainUnloadTime to '30' minute(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing MaxQueueThreads to '0' thread(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:41:: i INFO: Initializing IsWebServiceEnabled to 'True' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing MaxActiveReqForOneUser to '20' requests(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing MaxScheduleWait to '5' second(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing DatabaseQueryTimeout to '120' second(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing ProcessRecycleOptions to '0' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing RunningRequestsScavengerCycle to '60' second(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing RunningRequestsDbCycle to '60' second(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing RunningRequestsAge to '30' second(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing CleanupCycleMinutes to '10' minute(s) as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing DailyCleanupMinuteOfDay to default value of '120' minutes since midnight because it was not specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing WatsonFlags to '1064' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing WatsonDumpOnExceptions to 'Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogException,Microsoft.ReportingServices.Modeling.InternalModelingException' as specified in Configuration
file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing WatsonDumpExcludeIfContainsExceptions to 'System.Data.SqlClient.SqlException,System.Threading.ThreadAbortException' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing SecureConnectionLevel to '0' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing DisplayErrorLink to 'True' as specified in Configuration file.
w3wp!library!1!7/28/2014-09:08:42:: i INFO: Initializing WebServiceUseFileShareStorage to 'False' as specified in Configuration file.
w3wp!resourceutilities!1!7/28/2014-09:08:42:: i INFO: Reporting Services starting SKU: Enterprise
w3wp!resourceutilities!1!7/28/2014-09:08:42:: i INFO: Evaluation copy: 0 days left
w3wp!library!1!7/28/2014-09:08:42:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException: The report server has encountered a configuration error. See the report server log files for more information., CryptUnprotectData:
Win32 error:13;
Info: Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException: The report server has encountered a configuration error. See the report server log files for more information.
w3wp!library!1!7/28/2014-09:08:42:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.FailedToDecryptConfigInformationException: The encrypted value for the "LogonCred" configuration setting cannot be decrypted., ;
Info: Microsoft.ReportingServices.Diagnostics.Utilities.FailedToDecryptConfigInformationException: The encrypted value for the "LogonCred" configuration setting cannot be decrypted. ---> Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException:
The report server has encountered a configuration error. See the report server log files for more information.
   at Microsoft.ReportingServices.Diagnostics.DataProtectionLocal.UnprotectData(Byte[] data, Int32 dwFlags, Boolean transitoryData)
   at Microsoft.ReportingServices.Diagnostics.DataProtectionLocal.LocalUnprotectData(String data, Boolean transitoryData)
   at Microsoft.ReportingServices.Diagnostics.RSConfiguration.DecryptCatalogData(String encryptedData, String element)
   --- End of inner exception stack trace ---

Hi Vivek,
In Reporting Services, values for LogonUser, LogonDomain, and LogonCred are created when the report server connection is configured to use a domain account. As to the error that “The encrypted value for the "LogonCred" configuration setting cannot be decrypted”,
we can know that it relates to the domain account for report server connection.
To fix this issue, we can refer to the following steps:
Log in to SQL Server Database Engine in SQL Server Management Studio.
Under Security folder, give sufficient permissions for your domain account.
Open your Reporting Services Configuration (go to Start -> All Programs -> Microsoft SQL Server 2005 -> Configuration Tools -> Reporting Services Configuration)
Navigate to the Database Setup tab, select ‘Service Credentials’ as the Credentials Type, then type your domain account and password in there. Press Apply.
Restart the Report Server services.
Reference:
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/2d05b404-83aa-4fb2-bba6-52b587e890ec/sql-2005-rs-configuration-tool-encryption-key-error
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Saving so that windows user can have access?

I have my project all ready and those with quick time...loads up perfectly. However those who have windows have a long wait or pile will not come up. Do you know how i can save my final cut express project so that window users can have access to it?

thank you. one last question....the quick time movie file can not be seen when opening on a windows. do you know if i need a quick time pro so that i can convert it? or is there a way that i don't know about?

Why the apple store is so expensive and why the apple users can't access for free after spending huge amount in apple phone ?

Why the apple store is so expensive and why the apple users can't access for free after spending huge amount in apple phone ?

The Apple store is correct. The warranty is not international, and Apple will not accept or return iPhones shipped from a different country. You need to ship the phone to somebody in Hong Kong who can take it in to Apple for repair, or pay a third party repair shop in the Philippines to fix it.

Can't access some websites. Possibly DNS problem.

This problem only started to occur a couple of days ago. I found that I can't access certain websites,but all the other computers in exactly the same network environment have no problem accessing them. I tried changing my DNS server settings from the servers my ISP provided to the Google DNSs, 8.8.8.8 and 4.4.4.4, and those websites I couldn't access before became accessible immediately, but some other websites, which I was able to access with the DNS provided by my ISP before, became inaccessible again. I tried using another set of DNS addresses, the same thing happened: some websites that I couldn't access before became accessible, but some others become inaccessible again. All these DNS servers that I used work perfectly on other computers in my network, so it has to be the problem of my computer. This has nothing to do with the browser, as all of the browers in my system have the same problem, even including the Internet Explorer in my VMware Windows virtual machine. I tried flushing the DNS cache with dscacheutil -flushcache, and it didn't work.
I'm using Lion 10.7.3 on MacBook Pro MC371. Please help!

Please give an example of a site you can't access now.

Can't access certain website(s) now-

Has anyone else ever had trouble loading a website with Verizon wireless? I am having trouble loading two, these websites are linked. I have tried cleaning out my cache and bookmarks. The problem started when we had a prototype website done for us, and then the webmaster changed to a "new" website address for this. I cannot access the website with the new address, only the old one. I also cant directly access the linked to other website now. tMy wife can't access these website either, even though she has a PC and I have a Mac, so we thought it must be the ISP.

Hi community,
We want this device trouble to fixed for everyone so every site can be accessed. This 890L device is a 4G product that has had a glitch found while connected to 3G. We have found that while connected to 3G service, these sites are all accessible. Can anyone confirm if this has been tested and verified to be the case? If so, we have a fix to get the 4G connection to have the sites work too. If this issue happens while on 3G as well then we need to open an investigation ticket for that specific line.
The fix for those that have access to the sites on 3G is below. Please follow the directions below to install a software patch onto their computer. This patch changes the default MTU size from 1500 to 1428 which is acceptable on the network without the need for fragmentation. Please use the appropriate link based on the operating system.
Windows based `Set MTU Size` tool: http://production.4510.verizon.mifiupdates.com/Windows/MiFi4510LSetMTU_Win.zip
Mac OS X based `Set MTU Size` tool: http://production.4510.verizon.mifiupdates.com/Mac/MiFi4510LSetMTU_Mac.zip
Linux based `Set MTU Size` tool: http://production.4510.verizon.mifiupdates.com/Linux/MiFi4510LSetMTU_Lin.zip
Once the zip file is downloaded, go through the below steps. Windows XP users will be prompted to do a reboot.
Unzip SetMTU_Win.zip
Double click on SetMTU.exe
Select value (default 1428)
Reboot is required on XP only
Please let us know if after this download the trouble persists.
Thank you,
MariaC_VZW
Please follow us on Twitter @VZWSupport

Can't access several websites after last security update

Hello,
After upgrading both my Macbook Air mid 2011 and iMac 2008 (with SSD) both running Mountain Lion 10.8.4 to the last security fix, I can't access from any of those two computers a variety of websites, for example:
www.opennicproject.org
www.gentoo-el.org
www.adslgr.com
These are only three. Almost half of Google's results are blocked. Using the terminal utility I am able to resolv some of them but not actually 'ping' them. I get no ping replies. I can access all these websites from other computers or devices (iPhone/iPad/Ubuntu desktop/WindowsXP laptop) on the same LAN. This problem exists only in the 2 macs which are up-to-date. I am sure that this problem is related to latest security update I did a couple of days ago, to both computers.
I'd like to know if anyone who have all patches installed up to the latest OSX version (mountain lion 10.8.4) has the same issues and can ping/resolv/access these websites.
Note that although I can't access these websites directly using any direct network connection, I can access them using TOR browser bundle for mac, which means that something is going on at a computer level.
I have checked so far:
- Applicationn Apple's firewall is not creating the problem (disabled/enabled all)
- ipfw/PF is not running with any ruleset
- LittleSnitch blocks just a couple of annoying outgoing connections. Nothing there (I disabled/enabeld it, same thing).
- Other computers access the websites/ping them/etc.
- I can access websites using TOR.
NOTE: It's not just 3 websites, it's something like 1 out of 3 DuckDuckGo links.
Ideas and thoughts are welcomed!
Best Regards,
PA

From the Safari menu bar, select
Safari ▹ Preferences ▹ Extensions
Turn all extensions OFF and test. If the problem is resolved, turn extensions back ON and then disable them one or a few at a time until you find the culprit.
If you wish, you may be able to salvage the malfunctioning extension by uninstalling and reinstalling it. That will revert its settings to the defaults.

Need to download a programme to set up VPN but I can't access the website as it is also blocked in china? how do I install the programme if I cant download it or have it on a external hard drive.

Need to download a programme to set up VPN but I can't access the website as it is also blocked in china? how do I install the programme if I cant download it or have it on a external hard drive.

Not sure I understand you correctly.. Are you currently in China, and therefore unable to download the app? Also, which program is it that you're trying to get?

Can't access some websites - URL is hijacked by "unotelly" - ??

This has a virus-like feel to it... I can't access certain websites,. When I do, I'm bumped to a site for Untotelly.
I type: www.bbc.co.uk
And I go to: http://quickstart3.unotelly.com/?origin=http://www.bbc.co.uk/
At the top of that page I'm asked to "please update your IP address" (among other things) .. which I'm reluctant to do.
The question is: how do I stop this from happening?

I'd think that the DNS settings on your computer or router have been changed to unotelly's ones.
How to remove UnoDNS : UnoTelly Customer Service

I can't access some websites

I have a brand new macbook air and for some reason out of the blue I can't access some websites everything worked fine up till now.

Down For Everyone Or Just Me -> Check if your website is down or up

EA4500 - can only access youtube, google at a very slow speed, can not access anyother website

Got a new EA4500 for X'mas
After setting up the new router I could only access youtube and google at a very slow speed, however I can not access anyother website - facebook, yahoo and etc...
it would ping yahoo and google no problem
friend told me to do a tracert some ip address and his conclusion was the router is fully functional
ISP uses PPPoE, Im sure that the username and password are correct.
upgraded to the latest firmware manually, and holy hell accessing the router with no internet access is a pain in the **bleep**!
Please help and Merry X'mas

tonup80 wrote:
I've made sure that both the EA4500 setting were the same as the WRT54G, did not solve the problem.
IP Address behind WRT54G is 192.168.1.103
behind modem is 202.151.XX.XX
It might be a DNS problem. Release & renew ip on the status page of your router. Just make sure you are already using the latest Linksys smart wifi firmware, reset the router & reconfigure. You can download the firmware here http://homesupport.cisco.com/en-us/support/routers/EA4500.

Can't access my website through safari through linksys modem

I've just spent 6 hours with linksys support and all we could make work is Internet Explorer. But I mainly work on a Mac, which doesn't have IE and I'd much rather work with safari.
Here's the problem.
I have a bunch of websites all hosted under the same shared hosting account. At first I could access them while wirelessly connected to linksys router. Then the connection got very slow and eventually, I couldn't access my websites anymore. I could access all other website. In fact, I'm connected wirelessly and I can reach that forum, but I can't access my websites in that hosting account.
EVERYONE ELSE can access my websites though. And I can go anywhere else which has wireless connection and I can access my websites. So they're up.
I can also connect my computer directly to the modem and access my websites. It's only when I'm connected to the linksys wireless router that I can't.
So the idea was the problem is with linksys. I spent 6 hours with linksys support and all we could do is make it work on my PC with I.E. by selecting the following option: Internet options --> connections -->LAN settings --> and check "automatically detect settings.
How do I do that with Safari?? Any suggestions?

Hi Rick,
It's not a mac problem. I am able to access my router i.p address with safari.
The problem that I have is with the Mac AND my PC. They both cannot access my WEBSITES that are all located in one hosting account using Safari. For example, I can't access www.bullseye-promotions.com using safari or Firefox.
*What I need to figure out:*
it work on my PC with I.E. by selecting the following option: Internet options --> connections -->LAN settings --> and check "automatically detect settings.
How do I do that with Safari?? Any suggestions?
*A better explanation of the problem:*
HERE IS THE CONFUSING PART... I can access my websites through a linksys wireless router outside my home. The problem occurs only in my home. I bought a new linksys router but the same problem remains.
Even when I hardwired through the linksys, I still can't access my websites that are hosted in that particular shared hosting account, except with I.E.
sometime I gain temporary access but then I loose it again. I think the linksys support guy told me it's about linksys giving the right public I.P address, or something like that.

Can not access a website but everyone else is doing well and the old computer with the same internet coming in on that side.

Can not access a website but everyone else is doing well and the old computer with the same internet coming in on that side. side is www.miun.se

You can remove all data stored in Firefox from a specific domain via "Forget About This Site" in the right-click context menu of an history entry ("History > Show All History" or "View > Sidebar > History") or via the about:permissions page.
Using "Forget About This Site" will remove all data stored in Firefox from that domain like bookmarks, cookies, passwords, cache, history, and exceptions, so be cautious and if you have a password or other data from that domain that you do not want to lose then make a note of those passwords and bookmarks.
You can't recover from this 'forget' unless you have a backup of the involved files.
It doesn't have any lasting effect, so if you revisit such a 'forgotten' website then data from that website will be saved once again.

Server 4: Local user can't access restricted website

Similar Messages

Maybe you are looking for