Suggestion, Authorization error, Problem – Google Search Appliance Enabling Windows Integrated Authentication version 6.8 User Manual
Page 25: More troubleshooting steps
Google Search Appliance: Enabling Windows Integrated Authentication
25
Suggestion
This error indicates that the host on which the SAML Bridge resides might have an incompatible version
of the .NET framework. Refer to the section “SAML Bridge Host Prerequisites” on page 8 for the correct
version.
If you’ve checked the .NET version and determined that it meets the requirements, you can reconfigure
the .NET framework for IIS as follows:
cd C:\WINDOWS\Microsoft.NET\Framework\your-version\
aspnet_regiis.exe -i
When the command is done reconfiguring your IIS server to use the specified version of .NET, it displays
a message like the following:
Finished installing
(2.0.50727).
Authorization Error
Problem
The log file shows a 401 error (unauthorized). The following is an example.
1/4/2007 9:14:19 AM, GetURL: GetURL =http://host.domain.domain.com:82/deny.html
1/4/2007 9:14:19 AM, GetURL: inside GetURL internal
1/4/2007 9:14:19 AM, GetURL: Sending a Head request to target URL
1/4/2007 9:14:19 AM, GetPermission: AuthImpl::caught WebException
1/4/2007 9:14:19 AM, GetPermission: e = System.Net.WebException: The remote
server returned an error: (401) Unauthorized.
at System.Net.HttpWebRequest.CheckFinalStatus()
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.Net.HttpWebRequest.GetResponse()
at SAMLServices.Common.GetURL(String url, ICredentials cred)
at SAMLServices.Common.GetURL(String url)
at SAMLServices.Wia.AuthImpl.GetPermission(String url, String subject)
Suggestion
This problem is typically a result of Kerberos configuration problems. Check that Kerberos is set up,
using the procedure specified in the section “Kerberos Prerequisites” on page 8.
More Troubleshooting Steps
For more troubleshooting steps, visit the SAML Bridge wiki (
).