Version Affected: All
Overview
When an HTTP OPTIONS request is made to a realm's endpoint, the request returns a 404 instead of a normal response.
Cause
Internet Information Services (IIS) may be configured to block the OPTIONS HTTP verb through Request Filtering. Request Filtering can block any HTTP verb this same way, not just OPTIONS -- if a different verb is returning a 404 with no other explanation, check for the same cause.
Resolution:
- Open IIS Manager on the affected server.
- Navigate to the realm's site.
- Open Request Filtering.
- Select the HTTP Verbs tab.
- Confirm OPTIONS is listed with Allowed set to False.
- Remove the OPTIONS entry from the filter list.
After removing the entry, the HTTP Verbs list no longer includes OPTIONS, and the verb is no longer blocked:
The realm's endpoint now responds normally to OPTIONS requests.
SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.
Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.
Comments
Please sign in to leave a comment.