Captcha gives 401.3 – unauthorized

  • Resolved Steve Kimpton

    (@stevekimpton)


    9 years, 1 month ago

    I have a site with AIOS installed and just lately users can’t comment – they just get

    HTTP Error 401.3 – Unauthorized
    You do not have permission to view this directory or page because of the access control list (ACL) configuration or encryption settings for this resource on the Web server.

    Module IIS Web Core
    Notification AuthenticateRequest
    Handler StaticFile
    Error Code 0x80070005
    Requested URL https://127.0.0.1:80/
    Physical Path C:\inetpub\wwwroot
    Logon Method Anonymous
    Logon User Anonymous

    If I remove the captcha – no change.
    If I deactivate AIOS, problem goes away

    https://www.ads-software.com/plugins/all-in-one-wp-security-and-firewall/

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Contributor wpsolutions

    (@wpsolutions)

    That appears to be an error typically produced by an IIS server.
    Have you talked to your host support people to see if they can explain why it is occurring? It might be some kind of server configuration that needs setting so that the AIOWPS can be allowed to work properly.

    Thread Starter Steve Kimpton

    (@stevekimpton)

    Hmm,

    Its supposed to be running on Linux! (and that’s what my control panel says) I’ve asked the host support for an explanation.

    Thread Starter Steve Kimpton

    (@stevekimpton)

    I notice that the error message includes a local URL. Is this local to the server or is the plugin trying to write to the client?

    Thread Starter Steve Kimpton

    (@stevekimpton)

    I’ve had this from the hosting company:
    ===================
    …Thank you for your query,
    The 2nd line engineers has confirmed as you are on a Linux server, the server
    will not or cannot provide a IIS messages.
    Please investigate the wordpress site or settings.
    ===================

    How should I proceed?

    Plugin Contributor wpsolutions

    (@wpsolutions)

    Did you ask the support guys why does the error have info which states that you are on an IIS server?

    “Module IIS Web Core”

    This message is definitely not coming from AIOWPS.

    Another thing you can do is disable the firewall rules (if any are enabled) and then do some tests by activating each rule one by one to see which might be creating the condition for your server error and then leave that rule disabled.
    Just to re-clarify, that error is being produced by your server.

    Thread Starter Steve Kimpton

    (@stevekimpton)

    The hosting company are adamant that I am running on a Linux server and I am sure they are correct. Running phpinfo() confirms it:
    ======================
    Linux linweb24.linvh1.fasthosts.co.uk 2.6.18-406.el5.centos.plus #1 SMP Tue Jun 2 22:21:26 EDT 2015 x86_64
    ======================

    The detail of the error message includes;
    Requested URL https://127.0.0.1:80/
    Physical Path C:\inetpub\wwwroot

    These just don’t look right, even if the (shared) server was running IIS. The path would probably be much longer. It looks more like a path on my PC – not the host.

    I tried disabling all the firewall and extra firewall rules but it made no difference.

    However disabling “Block Spambots From Posting Comments” cleared the problem. Does this help you see what might be going wrong?

    Plugin Contributor wpsolutions

    (@wpsolutions)

    However disabling “Block Spambots From Posting Comments” cleared the problem. Does this help you see what might be going wrong?

    If that is the case then you should leave that feature disabled.

    The “Block spambots” feature checks for submission of comments posts where the HTTP_REFERER does not match your url or if the user agent is empty.
    Looks like for your case one of these conditions are triggering that rule.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Captcha gives 401.3 – unauthorized’ is closed to new replies.