PS2003 Windows Credentials Error

[wwalkerbout]

Hi,

In a two-server installation of Project Server 2003 (IIS/PS2003/WSS on
one box, SQL Server 2000 on another, both on top of Windows Server
2003), I am experiencing difficulties logging in using Windows
Authentication. The error message I receive (both via PWA and PP2003),
is:

"Project cannot log you on automatically using your Windows user
account. You need to change the account in your profile, or contact
your Project Server administrator to check if your Windows user account
exists and is a valid account on the Project Server. (5003)"

I have tried with both a Domain Account and a Local Account (the local
account I replicated on the PS2003 and the SQL Server boxes for
pass-through authentication), but without success.

My suspicion is that the issue lies with my IIS Security configuration,
but I opened up everything to anonymous access to test things out (it
is a Test/Dev environment), and I am still experiencing the problem.

I did have problems trying to use a Windows Domain Account as a Service
Account when installing WSS (it wouldn't create the Content and Config
databases), so I reverted to a native SQL Server Account for that
process. But I didn't think that should affect the Windows Domain
Account login process. However, I though that this was worth
mentioning, as it may allude to some network security configuration
issue that may be a cause.

Has anyone had experience troubleshooting this type of issue? If so,
could you please provide some feedback on the best way to approach
troubleshooting this process? My search across the Boards has proved
fruitless so far.

Any assistance would be most appreciated.

Cheers,


Wayne

 

[wwalkerbout]

Ops.

Sorry about the double message above. Must have a sticky key on my
keyboard.

Looks like I jumped the gun with my message and the testing I was
doing. I just found on the Microsoft Site an article that explains that
the Anonymous Access setting in IIS causes this message (Article ID :
837652 at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;837652, allbeit
PS2002 related).

So, having disabled the Anonymous Access setting in IIS, I now have the
problem that I am getting prompted for Windows Account credentials each
time I attempt to access Project Server while logged in on the
Workstation as a valid PS2003 Windows Authentication based User. Of
course the PS2003 login process should automatically log the user in.

Any suggestions on troubleshooting this issue?

Cheers,


Wayne

 

[Nico Oosthuysen]

Hi Wayne,

In addition to disabling Anonymous authentication you need to enable
Integrated Windows Authentication - just want to confirm that you did
do that (as per the article)?

Secondly, you might try to check the Internet Explorer configuration on
the client workstation - specifically the Trusted Sites configuration -
your Project Server URL must be listed as a trusted site, and your
trusted site settings need to include the option "Automatic logon with
current username and password".

Nico

 

[wwalkerbout]

Hi Nico,

Thanks for the feedback. It has taken me a couple of days to get back
to checking for responses.

I can confirm that I did check that Integrated Windows Authentication
was enabled on the Server (within IIS).

Additionally, I did check that the Internet Explorer configuration on
the client workstation - specifically the Trusted Sites configuration -
was set with the Project Server URL being listed as a Trusted Site.

Finally, the Trusted Site settings did include the option "Automatic
logon with current username and password".

Any additional suggestions gladly accepted.

Cheers,


Wayne

 

[Rolly Perreaux]

Ops.

Sorry about the double message above. Must have a sticky key on my
keyboard.

Looks like I jumped the gun with my message and the testing I was
doing. I just found on the Microsoft Site an article that explains that
the Anonymous Access setting in IIS causes this message (Article ID :
837652 at:
http://support.microsoft.com/default.aspx?scid=kb;en-us;837652, allbeit
PS2002 related).

So, having disabled the Anonymous Access setting in IIS, I now have the
problem that I am getting prompted for Windows Account credentials each
time I attempt to access Project Server while logged in on the
Workstation as a valid PS2003 Windows Authentication based User. Of
course the PS2003 login process should automatically log the user in.

Any suggestions on troubleshooting this issue?

Cheers,


Wayne

Hi Wayne,

Can you successfully login to PWA after typing your Windows Account
credentials in the pop-up? Or are you still receiving the error?

Also can I also safely assume that you are logging into the Windows
domain from your workstation at boot-up?

Cheers,

--
Rolly Perreaux, PMP
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com

 

[Rolly Perreaux]

Hi Nico,

Thanks for the feedback. It has taken me a couple of days to get back
to checking for responses.

I can confirm that I did check that Integrated Windows Authentication
was enabled on the Server (within IIS).

Additionally, I did check that the Internet Explorer configuration on
the client workstation - specifically the Trusted Sites configuration -
was set with the Project Server URL being listed as a Trusted Site.

Finally, the Trusted Site settings did include the option "Automatic
logon with current username and password".

Any additional suggestions gladly accepted.

Cheers,


Wayne

Hi Wayne,

I am assuming that you still have errors logging into PWA

Can you give us a quick rundown of your network and server
configuration?

Cheers,

--
Rolly Perreaux, PMP
Project Server Trainer/Consultant

IT Summit Series
Advanced Microsoft Technology Training
http://www.itsummitseries.com