Site Manager does not start when a user tries to connect to a Web site that uses the AuthFilter filter

When a user tries to start Site Manager in Microsoft Content Management Server (MCMS) 2002 Service Pack 1 (SP1), the Site Manager client does not start. The user is prompted to log on, and after the user does so, the Site Manager console does not start. The user does not receive an error message, and the Site Manager client does not start.

Note This problem only occurs when you use the version of Site Manager that is included in MCMS 2002 SP1. This problem does not occur when you use the original release version of MCMS 2002.

This problem occurs because of the Microsoft Internet Information Services (IIS) response when IIS is configured with the Microsoft Commerce Server 2002 AuthFilter filter for authentication.

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.

Microsoft has confirmed that this is a problem in MCMS 2002.

A Network Monitor capture displays the connection problem that is described in this article. You may notice the following from the trace capture:

• The post request is sent to the NR/System/Marshalling/resstub.asp file without any cookies.
• The AuthFilter filter redirects to the same URL with a unique querystring attached (NR/System/Marshalling/resstub.asp?wfx2=lh2hj34l8s), and then sets the MSCSFirstRequestedUrl cookie.
• The connection is reset in this case by IIS. You cannot send a redirect from an ISAPI filter and keep the connection alive.
• The client responds back to the FIN that was sent by the server with a FIN ACK, and the connection is gracefully closed. There is no reset.

Note A capture of a successful operation does not have a redirect. The first post request to the NR/System/Marshalling/resstub.asp file is performed when the client already has an MSCSFirstRequestedUrl cookie. The Commerce Server 2002 AuthFilter filter has already made sure that the client supports cookies.

For additional information about the terminology that is used to describe Microsoft product updates, click the following article number to view the article in the Microsoft Knowledge Base: