Welcome to ISAserver.org

SP1 Issue

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> General >> SP1 Issue

Page: [1]

Message

<< Older Topic Newer Topic >>

SP1 Issue - 22.Mar.2002 5:36:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

After installing SP1 and updating all my clients with the new client software...ISA is prompting for a login everytime the computer tries to access the internet. Whats even weirder is if I just hit cancel (at the login prompt), the connection works fine but it will keep prompting until I put a valid login in. Which in that case, it will keep the login info until the next reboot.

Anybody else experiencing this issue after installing SP1?

Post #: 1

Featured Links*

RE: SP1 Issue - 22.Mar.2002 5:49:00 PM

Jez

Posts: 367
Joined: 30.Jan.2002
From: Essex, England
Status: offline

I noticed this on one occasion when the option to "Ask unauthenticated users for authentication" was checked on the outbound web request listener. Try unchecking it and see what happens (if its checked that is)

If not let us know and we give you some more ideas.

(in reply to Alch)

Post #: 2

RE: SP1 Issue - 22.Mar.2002 5:53:00 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jeremy,

What's funny about this is that SP1 was supposed to fix the problem with unauthenticated HTTP requests when that option is checked and autodiscovery is used. Maybe its a different problem?

Tom

(in reply to Alch)

Post #: 3

RE: SP1 Issue - 22.Mar.2002 5:56:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

If I uncheck that, then all the rules I setup to block certain users fail to work.

I think its another issue. Everything was working fine before SP1. heh

At first I thought the proxy client wasn't passing their windows login info, but it appears that it does, since everything works if I hit cancel.

I just can't keep telling all my users to hit cancel hundreds of times a day. [Frown]

[ March 22, 2002, 05:59 PM: Message edited by: Alch ]

(in reply to Alch)

Post #: 4

RE: SP1 Issue - 22.Mar.2002 6:06:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

I just noticed something. This seems to only be happening on W98 clients. I have a mix of 98 and 2k workstations, and nobody using win2k has reported this problem nor can I seem to replicate it.

(in reply to Alch)

Post #: 5

RE: SP1 Issue - 22.Mar.2002 6:07:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Alch,

check out http://support.microsoft.com/default.aspx?scid=kb;EN-US;q297324

Regards,
Stefaan

(in reply to Alch)

Post #: 6

RE: SP1 Issue - 22.Mar.2002 6:14:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

Thanks for the link Stefaan, but I'm not sure this will resolve my issue.

See, the users are trying to hit a website that they are allowed access to.

Also, I would assume that this updated w3proxy.exe file would be included in SP1 since this article was posted about 7 months ago.

I will try the registry fix though, and restart the server during the lunch hour when usage is minimal.

-Joe

(in reply to Alch)

Post #: 7

RE: SP1 Issue - 22.Mar.2002 6:30:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Joe,

the fix is included in SP1 and it works. If the users have access to certain sites, but in web pages on this allowed sites there are items from other not allowed sites (typically banners, animated gifs, etc.), you can prevent the authentication popup with this fix.

Regards,
Stefaan

(in reply to Alch)

Post #: 8

RE: SP1 Issue - 22.Mar.2002 6:47:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

Stefaan, I understand that issue, but this happens to users who are not blocked from any sites aswell.

I think I have resolved it though. I found this article and it suggested unchecking "automatically detect proxy server" on the clients and that seems to resolve the issue. I don't see why SP1 would break this, but as long as everything works, I'm fine with it.

Thanks for the help guys...much appreciated.

-Joe

(in reply to Alch)

Post #: 9

RE: SP1 Issue - 22.Mar.2002 8:56:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Joe,

glad you got it working. Strange article though (http:///) [Frown]

Regards,
Stefaan

(in reply to Alch)

Post #: 10

RE: SP1 Issue - 22.Mar.2002 8:57:00 PM

SHealey

Posts: 60
Joined: 22.Jan.2002
From: denver
Status: offline

i have this same problem after applying SP1. if i check the ask for authentication check box on outbound request, users get a login dialog box.

the main reason i want authentication for outbound request is so that i can eliminated all the anonymous listings in reports. in order to do this without requireing authentication is to make rules that allow domain/users access to the internet.

also, why hasnt microsoft fixed the problem that all first request thru ISA are anonynmous before authenticated?

(in reply to Alch)

Post #: 11

RE: SP1 Issue - 23.Mar.2002 12:14:00 AM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

sorry for the bad link, here's the url...

http://support.microsoft.com/default.aspx?scid=kb;en-us;Q305204

SHealey - the solution posted on that site has worked for me. Just gotta get around to all the work stations and toggle the check box now... [Roll Eyes]

why does something like this always happen with a M$ service pack
[Confused]

(in reply to Alch)

Post #: 12

RE: SP1 Issue - 23.Mar.2002 12:40:00 AM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Joe,

hmm... as Tom said, SP1 should have fixed this issue.

Reading the article it is my understanding that it only happens if the autodiscovery port is the same as the outgoing web request listener. Default, the outgoing web request listener is on TCP 8080 and the autodiscovery port on TCP 80. Was this a fresh install of ISA or a upgrade from MS Proxy2?

Regards,
Stefaan

(in reply to Alch)

Post #: 13

RE: SP1 Issue - 23.Mar.2002 3:49:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

It was a fresh install, and I do have those ports set as you stated (default settings).

Again though, this issue only came up after installing SP1.

[ March 23, 2002, 03:53 PM: Message edited by: Alch ]

(in reply to Alch)

Post #: 14

RE: SP1 Issue - 23.Mar.2002 4:15:00 PM

lemonwater925

Posts: 417
Joined: 22.Mar.2001
From: North of the 49th
Status: offline

I have the same issue. Been working with MS on it for several weeks. Have sent configs and traces, but still have this issue as well. Did make the registry change (that the SP1 should make but, does not).

(in reply to Alch)

Post #: 15

RE: SP1 Issue - 23.Mar.2002 4:22:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

did you try toggling off "automatically detect setting"?

that seems to work for me.

(in reply to Alch)

Post #: 16

RE: SP1 Issue - 23.Mar.2002 4:32:00 PM

lemonwater925

Posts: 417
Joined: 22.Mar.2001
From: North of the 49th
Status: offline

We use the IEAK for browser configuration. Need the auto detect. Working with MS on this one. Will need to mention that to them....

(in reply to Alch)

Post #: 17

RE: SP1 Issue - 25.Mar.2002 10:14:00 PM

SHealey

Posts: 60
Joined: 22.Jan.2002
From: denver
Status: offline

alch, unchecking "use automatic configuration script" DID resolve the problem. thank you for that bit of advice. i can still leave "automatically detect settings" check.

i am use IE6.0 on win2k and NT4.0. now i just have to update all my clients. i was wondering if in ISA mangement console under web browser client configuration if i uncheck "set web browsers to use automatic configuration script"
and leave "automatically discover settings" wil my clients be automatically updated to the new settings or must i still physically goto each workstation and make the change in their browser?

(in reply to Alch)

Post #: 18

RE: SP1 Issue - 25.Mar.2002 10:26:00 PM

Alch

Posts: 22
Joined: 26.Feb.2001
From: NY
Status: offline

Unfortunatly, I don't think it will update it automatically. I still recommend enabling those settings for the webclients for any future installations, but your existing computers would still need to be "refreshed".

I changed my settings and its been a few days now with no change on the clients...so it won't happen by itself.

Glad you got it fixed though. [Big Grin]