Unable to refresh site cache..

Event Type: Error
Event Source: Commerce Server Web Services
Event Category: None
Event ID: 1
Date: 5/09/2007
Time: 3:18:10 PM
User: N/A
Computer: DDAY-CS-DEV-2
Description:
An exception occurred in the 'CatalogWebService' Web service. Exception details follow:

Microsoft.CommerceServer.CacheRefreshFailedException: One or more errors occurred while refreshing the cache 'CatalogCache' of the site 'AppNZ':

The server 'DDAY-CS-DEV-2' of the application 'AppNZ' returned HTTP status code 401 (Unauthorized). The cache refresh URL used was 'http://dday-cs-dev-2/AppNZ/SiteCacheRefresh.axd?CacheToRefresh=CatalogCache'.

See the server event event log for more details.
at Microsoft.CommerceServer.Runtime.Configuration.CommerceResourceCollection.HandleErrors(List`1& failures, String cacheName, CommerceResourceCollection resourceCollection)
at Microsoft.CommerceServer.Runtime.Configuration.CommerceResourceCollection.RefreshCache(String cacheName, CommerceResourceCollection resourceCollection)
at Microsoft.CommerceServer.Catalog.Internal.CatalogServerContextBase.RefreshSiteCache()

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

From the web url I get the following

Server Error in '/AppNZ' Application.
--

Access is denied.
Description: An error occurred while accessing the resources required to serve this request. This may have been caused by an incorrect user name and/or password.

Error message 401.1: Logon credentials were not recognized. Make sure you are providing the correct user name and password. Otherwise, contact the Web server's administrator for help.

The web.config in both the web service and the site has the following authourisations as per the relevant setup documentation and also checked against http://support.microsoft.com/kb/931290

<location path="SiteCacheRefresh.axd">
<system.web>
<authorization>
<allow roles="LAN\Administrators"/>
<allow roles="LAN\Windows Developers"/>
<allow roles="LAN\CSCatalogWebSvc"/>
<allow roles="LAN\CSMarketingWebSvc"/>
<allow roles="LAN\CSOrdersWebSvc"/>
<allow roles="LAN\CSProfilesWebSvc"/>
<allow roles="BUILTIN\Administrators"/>
<allow roles="BUILTIN\CatalogWebSvc"/>
<allow roles="BUILTIN\MarketingWebSvc"/>
<allow roles="BUILTIN\OrdersWebSvc"/>
<deny users="*"/>
<deny users="?"/>
</authorization>
</system.web>
</location>

I have also tried the following with no success

<location path="SiteCacheRefresh.axd">
<system.web>
<authorization>
<allow roles="LAN\Administrators"/>
<allow roles="LAN\Windows Developers"/>
<allow roles="LAN\CSCatalogWebSvc"/>
<allow roles="LAN\CSMarketingWebSvc"/>
<allow roles="LAN\CSOrdersWebSvc"/>
<allow roles="LAN\CSProfilesWebSvc"/>
<allow roles="BUILTIN\Administrators"/>
<allow roles="BUILTIN\CatalogWebSvc"/>
<allow roles="BUILTIN\MarketingWebSvc"/>
<allow roles="BUILTIN\OrdersWebSvc"/>
<allow users="*"/>
<allow users="?"/>
</authorization>
</system.web>
</location>

Please note that this web service is set up to use integrated authentication and the IIS service is running as "NTLM" authentication, it appears that IIS is authenticating the user however the commerce server service is not.

Also I have double checked the authorisation manager for each of the web services and these are set up as per the set up documentation.

Any ideas anyone.. help !

[4680 byte] By [Ryan..] at [2008-1-9]