Welcome to ISAserver.org

User can't get authentication from AD server pass by ISA server

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> User can't get authentication from AD server pass by ISA server

Page: [1]

Message

<< Older Topic Newer Topic >>

User can't get authentication from AD server pass by IS... - 16.Apr.2008 3:47:13 AM

shawn.wu

Posts: 1
Joined: 16.Apr.2008
Status: offline

Hi All,
We are surfering this failure,
Users' IE was settled to ISA 2004 server for proxy, and ISA server has policy to another AD server for authentication. ISA server and AD server are in the same LAN network, but LAN users may encounter authentication failure sometimes, when users try to access internet, encounter access failure from ISA, error mesg is "access denied from ISA server", but at the same time, at user PC, popup one window to input username and password, but user input the original username and password, still failed to authenticate.
But after a while, 5 minutes, sometimes, 10 minutes, the access is back to normal again. But we did nothing at setting.
In past 2,3 days, almost each afternoon or morning, have 1 to 2 times this failure.
At ISA server, did not find attack from outside/inside PCs, normal sessions, and about 300 users are active, no special failure.
What is possible reason?

Tks
shawn

Post #: 1

Featured Links*

RE: User can't get authentication from AD server pass b... - 16.Apr.2008 10:33:47 AM

Rotorblade

Posts: 861
Joined: 27.Feb.2007
Status: offline

Hi Shawn,

It sounds like your issue is related to IE and Kerberos Authentication, especially if you�re running IE 6 that has been patched or IE 7. This is a known issue and the quick workaround would be to force NTLM authentication by not enabling the �Enable Integrated Authentication� under IE Advanced options.

HTH

RB

_____________________________

David Melvin
Ohio
MCSE: Security 2003, MCSA:Security 2003

(in reply to shawn.wu)

Post #: 2