Welcome to ISAserver.org

Client authentication help

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> General >> Client authentication help

Page: [1]

Message

<< Older Topic Newer Topic >>

Client authentication help - 18.Jun.2003 4:50:00 AM

gigabit

Posts: 15
Joined: 18.Jun.2003
From: Miami, FL
Status: offline

ISA is requesting authentication from users even though authentication is not required. I am using integrate authentication, and this only happens to one group of users with a restricted dest. set. Can anyone help? I am sure it is something small that I am overlooking. All I need is to make sure that these users are not asked to authenticate. OH if you use the users crdentials to authenticate it doen't work, only the admin account will allow the web access.

Post #: 1

Featured Links*

RE: Client authentication help - 18.Jun.2003 7:38:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gigabit,

check out http://support.microsoft.com/default.aspx?scid=kb;en-us;297324 . Just make sure ISA server is running SP1 and you manually create the ReturnDeniedIfAuthenticated registry value as indicated in the KB.

HTH,
Stefaan

(in reply to gigabit)

Post #: 2

RE: Client authentication help - 18.Jun.2003 7:47:00 PM

aselicean

Posts: 260
Joined: 7.Dec.2002
From: Romania
Status: offline

Thank you Stefaan

I was having the same problem. Now seems to be solved.

Cheers,

(in reply to gigabit)

Post #: 3

RE: Client authentication help - 18.Jun.2003 9:33:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Alin,

glad I could help! [Smile]

Thanks,
Stefaan

(in reply to gigabit)

Post #: 4

RE: Client authentication help - 18.Jun.2003 11:23:00 PM

gigabit

Posts: 15
Joined: 18.Jun.2003
From: Miami, FL
Status: offline

Stefaan,

Thanks. I already have sp1 installed. I think the problem was on how the destination set was configured. I took care of the problem, but now my users get to their website and all of the sudden they are asked to authenticate if they click on a link. Can I use * after .com(ex. *.microsft.com/*. They can cancel the authentication, but the page does not come up compltete. Any ideas?

Thanks for the help.

(in reply to gigabit)

Post #: 5

RE: Client authentication help - 18.Jun.2003 11:45:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gigabit,

running ISA SP1 is a requirement, *but* you still have to add that registry key *manually*! That will take care of authorized web pages which contains embedded objects from unauthorized web pages.

HTH,
Stefaan

(in reply to gigabit)

Post #: 6

RE: Client authentication help - 19.Jun.2003 2:57:00 AM

gigabit

Posts: 15
Joined: 18.Jun.2003
From: Miami, FL
Status: offline

Thank you sir. I did forget to do that.

(in reply to gigabit)

Post #: 7

RE: Client authentication help - 19.Jun.2003 8:06:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gigabit,

glad I could help! [Smile]

Stefaan

(in reply to gigabit)

Post #: 8

RE: Client authentication help - 19.Jun.2003 9:37:00 PM

gigabit

Posts: 15
Joined: 18.Jun.2003
From: Miami, FL
Status: offline

Stefaan,

Now I get a 407 error.

(in reply to gigabit)

Post #: 9

RE: Client authentication help - 19.Jun.2003 9:52:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Gigabit,

did you restart the web proxy service after applying the registry change? If it still doesn't work as expected, can you give us the URL for such a site?

HTH,
Stefaan

(in reply to gigabit)

Post #: 10