User can't get authentication from AD server pass by ISA server (Full Version)

All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS



Message


shawn.wu -> User can't get authentication from AD server pass by ISA server (16.Apr.2008 3:47:13 AM)

Hi All,
We are surfering this failure,
Users' IE was settled to ISA 2004 server for proxy, and ISA server has policy to another AD server for authentication. ISA server and AD server are in the same LAN network, but LAN users may encounter authentication failure sometimes, when users try to access internet, encounter access failure from ISA, error mesg is "access denied from ISA server", but at the same time, at user PC, popup one window to input username and password, but user input the original username and password, still failed to authenticate.
But after a while, 5 minutes, sometimes, 10 minutes, the access is back to normal again. But we did nothing at setting.
In past 2,3 days, almost each afternoon or morning, have 1 to 2 times this failure.
At ISA server, did not find attack from outside/inside PCs, normal sessions, and about 300 users are active, no special failure.
What is possible reason?

Tks
shawn 




Rotorblade -> RE: User can't get authentication from AD server pass by ISA server (16.Apr.2008 10:33:47 AM)

Hi Shawn,

It sounds like your issue is related to IE and Kerberos Authentication, especially if you’re running IE 6 that has been patched or IE 7. This is a known issue and the quick workaround would be to force NTLM authentication by not enabling the “Enable Integrated Authentication” under IE Advanced options.

HTH

RB




Page: [1]