Skip to main content

Hi All,


Hope to find an answer for the below error which we are currently experiencing on the K2 2003 server. It's an production issue.Please help as soon as possible.The error is:


NT AUTHORITYANONYMOUS LOGON from {IP address} is not allowed to open the worklist item.


Thanks in advance.


 


 

Are you running Kerberos?   Is this an ASP .NET app that is hosted some a different server than K2 server?


Was this working before and now stopped working or is this a new application?


Hi Peter,


We're using 'NTLM'.


The ASP.NET app is hosted on a different server than K2 server (we've 2 web servers and 2 K2 servers).


We  have been having this error from the beginning...


Hope you can provide a clear insight on this.


Thanks for getting back.


 


 


 


 


For double hop (user->webapp server1->k2 server2) NTLM will not be able to provide K2 server from your application web server, thus you are getting the anonymous error.


You have to set up Kerberos between the web app server and K2 server, or run the web app on the K2 server.


Reply