IIS-Windows-Authentication stuck in an infinite loop

Question

I'm trying to access an old ASP.NET-Api(API 1) via Angular 8. Because of CORS-Issues the access is handled via a proxy.conf.js-File. (Found in another post)

var Agent = require("agentkeepalive");

var keepaliveAgent = new Agent({
  maxSockets: 100,
  keepAlive: true,
  maxFreeSockets: 10,
  keepAliveMsecs: 1000,
  timeout: 60000,
  keepAliveTimeout: 30000 // free socket keepalive for 30 seconds
});

var onProxyRes = function (proxyRes, req, res) {
  var key = 'www-authenticate';
  proxyRes.headers[key] = proxyRes.headers[key] && proxyRes.headers[key].split(',');
};

const PROXY_CONFIG = [
  {
    target: Application-Url,
    context: "/api/",
    secure: false,
    changeOrigin: true,
    auth: "LOGIN:PASS",
    loglevel: "debug",
    onProxyRes: onProxyRes,
    agent: keepaliveAgent
  }
];
module.exports = PROXY_CONFIG;

In the .NET-Application the only thing that hints to the authentification is the following line in the web.config-File.

<authentication mode="Windows" />

When compiled and executed the following behavior occurs: A login-mask shows up which asks for windows-authentication. If the credentials are entered the mask closes and reopens again instantly. This behaviour continous endlessly.

Note: Accessing the api-endpoints via the commandline of the browser works perfectly fine.

Check if you hit loopback check.

Lex Li
– Lex Li

2019-08-14 16:33:28 +00:00
Commented Aug 14, 2019 at 16:33 — Lex Li
– Lex Li, Commented Aug 14, 2019 at 16:33
How can i do this?

codlix
– codlix

2019-08-15 06:46:00 +00:00
Commented Aug 15, 2019 at 6:46 — codlix
– codlix, Commented Aug 15, 2019 at 6:46

Jalpa Panchal · Accepted Answer · 2019-08-15 08:50:06Z

2

You could use below PowerShell command to disable look back check:

New-ItemProperty HKLM:\System\CurrentControlSet\Control\Lsa -Name "DisableLoopbackCheck" -Value "1" -PropertyType dword

after changing the registry key restarts the machine.

or you could try below things:

set this code in your web.config file:

<authentication mode="Windows" />
<authorization>
    <allow users="*" />
    <deny users="?" />
</authorization>

and make sure that you set NTML as the first provider.

check that under Advanced Settings... the Extended Protection is set to Accept.

answered Aug 15, 2019 at 8:50

Jalpa Panchal

13.1k2 gold badges15 silver badges34 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

codlix Over a year ago

Thanks that did it actually!

Collectives™ on Stack Overflow

IIS-Windows-Authentication stuck in an infinite loop

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related