• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ISA Upstream Authentication leakage

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Cache] >> General >> ISA Upstream Authentication leakage Page: [1]
Login
Message << Older Topic   Newer Topic >>
ISA Upstream Authentication leakage - 10.Oct.2005 12:09:00 PM   
rogozinskiy

 

Posts: 17
Joined: 16.Jul.2004
From: Kazakhstan
Status: offline
I have ISA Server 2004 St and other proxy (for special software).
I use Web chain for cascading proxy but ISA send to upstream proxy header "Proxy-Authorization: NTLM XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
" sametime.

As result - User see prompt for user authentication on upstream proxy(but authentication don't need on default on upstream proxy).

Upstream proxy response on this requests:
"HTTP/1.1 407 Unauthorized
Proxy-Authenticate: Basic realm="YYYYYYYYY""

It's liked on Q317822 and Q297080 but for ISA 2004 Server

What need for remove Proxy-Authorization header ?
Post #: 1

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Cache] >> General >> ISA Upstream Authentication leakage Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts