I've been scouring the site and the Internet in general, trying to figure out an odd occurance of a 403.6 error.
We have one user who seems to have a daily 403.6 error when logging in to our site.
We have a main site, that our main user-base logs into using a single sign-on account. From there, depending on roles, they'll have a set of options to log into other module applications. Some of those modules are restricted by domain (.mil) and may also have granted access to other domains or IP addresses.
This user, in the .mil domain, will log into the SSO, go to one of the restricted modules and hit the 403.6 error. She goes back in the browser, clicks on something else, and all is fine.
We set the user's IP address in the 'allow access', figuring it may give a secondary layer of acceptance, but they are still hitting that error. From my Failed Trace Request logs - this is what I see:
Warning -MODULE_SET_RESPONSE_ERROR_STATUS ModuleName IpRestrictionModule Notification 1 HttpStatus 403 HttpReason Forbidden HttpSubStatus 6 ErrorCode 2147942405 ConfigExceptionInfo Notification BEGIN_REQUEST ErrorCode Access is denied. (0x80070005)
We're not getting notified by any other user, so I cannot for the life of my figure out why this one person is.
Much of this tracing and reading IIS7 log files is relatively new to me for the fine details, so not sure if I should be looking elsewhere.
Any suggestions are much appreciated!!
Thanks,
Scott