Partager via

BCS: Login failed for user ‘NT AUTHORITYIUSR’

  • Article

Following my previous post, I just ran into another issue recently that I though I’ll write a post on so that it helps the community.

So I created an external content type to perform CRUD operations against a test table in a test database.  Saved that ECT (and so the model) to the BCS service application on my SharePoint 2013 server.  Assigned permissions to “All Users (Windows)” (NT Authority\Authenticated Users) with Execute permissions on metadata store (something that should not be done on live environments but secured store must be leveraged, but since this is a test environment… I took this liberty).  Created an external list and browsed to it.  And I was greeted with the below error.

image

I had setup this ECT to use “User’s Identity” (PassThrough) authentication and since metadata store permissions for “NT Authority\Authenticated Users” granted execute permissions I really wasn’t expecting this particular error.

After reviewing IISRESETs, reviewing ULS logs and bit of probing, I stumbled upon this KB article: SharePoint impersonates the IUSR account and is denied access to resources.  Perfectly matches my scenario!

I went ahead and set the value for aspnet:AllowAnonymousImpersonation to false in the web.config file of the web application where I had the external list as mentioned in the KB article and (I did not do an IISRESET after this change but it is recommended) that fixed the issue!

image

Hope this helps someone out there who’s trying out the same or similar thing and running into “Login failed for user ‘NT AUTHORITY\IUSR’.’.” error.  I’d recommend this web.config change for other scenarios too where a seemingly straight-forward service call would fail with a similar error.

Comments

  • Anonymous
    May 06, 2014
    Thanks man, you saved my time!

  • Anonymous
    July 30, 2014
    You're the best! :*

  • Anonymous
    August 08, 2014
    Hey Dude, This worked for me....Its really nice article... Thanks

  • Anonymous
    September 02, 2014
    Is there no other impact on the SharePoint site if we set it to false?

  • Anonymous
    September 02, 2014
    Joeprakash, I have personally not tested this against every single feature and installation/configurations of SharePoint so I can't comment on that. However, if you run into some other issue setting this web.config entry and isolated that problem is due to this web.config entry, please feel free to comment back and I'll try and take a look. Regards!

  • Anonymous
    September 18, 2014
    It worked for me...Thanks!!!

  • Anonymous
    December 21, 2014
    it worked fantastic.... Thank you so much

  • Anonymous
    February 23, 2015
    Thank You dude its Worked for me

  • Anonymous
    March 02, 2015
    This has been always helpful for me....Cheers Sridhar !

  • Anonymous
    January 25, 2016
    It worked for me!  Thank you for the article