ASP.NET - IIS7 Deployment Error 500 24 50 using WCF Web Service Binding w/ AD Groups -
background: getting internal server 500 24 50 error after deploying application has compiled without errors on local machine. server application deployed on has ton of security , running iis 7.5 need specify read , write access every directory. application uses windows authentication , web service populate drop down boxes via proxy. think there might issue connecting web service or issue read/write security on files, or issue active directory authentication.
for reason, internet explorer displayed can't load webpage error.
error in google chrome:
500 – internal server error. there problem resource looking for, , cannot displayed.
log file details:
#software: microsoft internet information services 7.5 #fields: date time s-sitename s-computername s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs-version cs(user-agent) cs(cookie) cs(referer) cs-host sc-status sc-substatus sc-win32-status sc-bytes cs-bytes time-taken 2011-05-18 13:54:46 w3svc1 fl-tpa-web-01 172.17.1.25 / - 80 - 172.17.1.25 http/1.1 mozilla/4.0+(compatible;+msie+8.0;+windows+nt+6.1;+wow64; +trident/4.0;+slcc2;+.net+clr+2.0.50727;+.net4.0c;+.net4.0e) - - invitations.myagencyservices.com 500 24 50 1380 368 15
msdn defines error @ http://support.microsoft.com/kb/943891 as:
500.24 - asp.net impersonation configuration not apply in managed pipeline mode.
web.config code:
<system.web> <customerrors mode="off" ></customerrors> <compilation debug="true" strict="false" explicit="true" targetframework="4.0" /> <trace enabled="true" pageoutput="true" /> <authentication mode="windows"/> <identity impersonate="true"/> <authorization> <allow users="alg\bmccarthy, alg\phoward" /> <allow roles="alg\acomp_user_admin" /> <allow roles="alg\acomp_user_amg" /> <allow roles="alg\acomp_user_big" /> <allow roles="alg\acomp_user_nis" /> <allow roles="alg\acomp_user_gla" /> <allow roles="alg\acomp_user_pip" /> <allow roles="alg\acomp_user_psm" /> <allow roles="alg\acomp_user_pam" /> <allow roles="alg\acomp_user_ann" /> <allow roles="alg\acomp_user_aam" /> <allow roles="alg\acomp_user_mwm" /> <allow roles="alg\acomp_user_gim" /> <deny users="*" /> </authorization> </system.web> <system.webserver> <modules runallmanagedmodulesforallrequests="true"/> </system.webserver> <system.servicemodel> <bindings> <basichttpbinding> <binding name="basichttpbinding_iacompservice1" closetimeout="00:01:00" opentimeout="00:01:00" receivetimeout="00:10:00" sendtimeout="00:01:00" allowcookies="false" bypassproxyonlocal="false" hostnamecomparisonmode="strongwildcard" maxbuffersize="65536" maxbufferpoolsize="524288" maxreceivedmessagesize="65536" messageencoding="text" textencoding="utf-8" transfermode="buffered" usedefaultwebproxy="true"> <readerquotas maxdepth="32" maxstringcontentlength="8192" maxarraylength="16384" maxbytesperread="4096" maxnametablecharcount="16384" /> <security mode="none"> <transport clientcredentialtype="none" proxycredentialtype="none" realm="" /> <message clientcredentialtype="username" algorithmsuite="default" /> </security> </binding> </basichttpbinding> </bindings> <client> <endpoint address="http://63.236.108.91/acompservice.svc" binding="basichttpbinding" bindingconfiguration="basichttpbinding_iacompservice1" contract="acomp_servicereference.iacompservice" name="basichttpbinding_iacompservice1" /> </client> </system.servicemodel>
any suggestions up-voted! looking!
the 500.24.50 error occurs because asp.net integrated mode unable impersonate request identity in beginrequest , authenticaterequest pipeline stages. 500.24 thrown if application running in integrated mode, validateintegratedmodeconfiguration not declared or set true, , application has identity impersonate set true.
workaround
a. if application not rely on impersonating requesting user in beginrequest , authenticaterequest stages (the stages impersonation not possible in integrated mode), ignore error adding following application’s web.config:
<system.webserver> <validation validateintegratedmodeconfiguration="false" /> </system.webserver>
b. if application rely on impersonation in beginrequest , authenticaterequest, or not sure, move classic mode.
c. remove web.config won't effective in integrated mode anyway
read more on breaking changes in iis 7 learn.iis.net
Comments
Post a Comment