• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Multiple Authentication

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> Multiple Authentication Page: [1]
Login
Message << Older Topic   Newer Topic >>
Multiple Authentication - 16.Aug.2005 3:17:00 PM   
wernera

 

Posts: 3
Joined: 16.Aug.2005
Status: offline 		Hi All,

Have recently upgraded SBS 2003 to SP1 and accordingly ISA 2000 SP2 to ISA
2004 (Not yet SP1).

I made a ruleset (domain names) where some users may go on certain times
(work hours). Other users have complete and unrestrictive access to the
internet.

In all everything works great, restricted users get blocked when they visit
sites which are not listed in the domain name ruleset. But if they visit a
site which they are allowed to and that sit containes links to other sites
(for instance a ad or picture) than they keep on getting authentication
dialog boxes which have to be clicked away in order to get the website
visible.

Now this problem also existed in ISA 2000 and i resolved that by setting
the according registrykey mentioned in Q297324. So in ISA 2000 this problem
was 'fixed'.

Is it possible to achieve the same in ISA 2004, do i need to install SP1
for this to work? Or do I have to go back to ISA 2000 SP2?

Fyi, Alle workstations are XP PRO SP2 with Firewall client from ISA 2004
installed.

Werner
Post #: 1
RE: Multiple Authentication - 17.Aug.2005 6:23:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Werner,

Can you give me some details so I can try to repro the issue? I've never seen it myself, so I'd like to see what the problem is and fix it permanently.

Thanks!
Tom

(in reply to wernera)
Post #: 2
RE: Multiple Authentication - 17.Aug.2005 7:39:00 AM   
wernera

 

Posts: 3
Joined: 16.Aug.2005
Status: offline 		Hi Tom

Thx for youre response, tried posting this in the microsoft.public.isa newsgroup a few days ago but nobody seems to read that group :-)

I would like to give you all the details you need, but i'm not sure what you want exactly,

Info:

The ISA server was upgraded, so all rulesets and everything was upgraded accordingly,

I've made no 'special' adjustments myself, so everything is as is through the upgrade.

Only thing was that the upgrade converted my rulesets and according destination sets into a URL Set.

For instance:

The site http://www.detelefoongids.nl/ is a site that can be visited bij restricted users during work hours.

So there is a Domain Set with the following context:

Allowed Sites;

Entries:
*.detelefoongids.nl
*.google.com

Als there is a URL set with the according name Allowed URLs

Enties:
http://*.detelefoongids.nl/*
http://*.google.com/*

If either one of them is applied in a ruleset for restricted access, the users whom have restricted access can visit these sites but the google site loads normally, and the other site keeps asking for authentication (windows dialog for username and password) On this site for three times and then everything is ok, if one tries to reload the same page, then the same dialog comes in again.

Need more deatil ore other info?

Please let me know

Thx

Werner

(in reply to wernera)
Post #: 3
RE: Multiple Authentication - 17.Aug.2005 10:39:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Werner,

Check out:

http://msdn.microsoft.com/library/en-us/isasdk/isa/fpcweblistenerproperties_returnauthrequiredifauthuserdenied.asp?frame=true

There script info is included on that page.

HTH,
Tom

(in reply to wernera)
Post #: 4
RE: Multiple Authentication - 18.Aug.2005 7:11:00 AM   
wernera

 

Posts: 3
Joined: 16.Aug.2005
Status: offline 		Hi Tom,

Thx for you're help and response, found the answer just now. Seems i've been enabling all clients as secureNAT clients and simultaniously using the firewall client.

After disabling the proxy server settings in IE everything is ok.

So the answer was right there under my nose ;-))

Many thx again

Werner

(in reply to wernera)
Post #: 5
RE: Multiple Authentication - 20.Aug.2005 12:49:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Werner,

Great! Good to hear you got it working and thanks for the follow up!

Tom

(in reply to wernera)
Post #: 6
RE: Multiple Authentication - 29.Aug.2005 8:26:00 AM   
ababinchak

 

Posts: 195
Joined: 16.Aug.2005
From: Michigan
Status: offline 		FYI: If you have upgraded to ISA2004 using the SBS SP1 CD set, then you are running ISA2004 SP1.

(in reply to wernera)
Post #: 7
RE: Multiple Authentication - 29.Aug.2005 10:41:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline 		Hi Amy,

Thanks!
Tom

(in reply to wernera)
Post #: 8

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 General ] >> ISA 2004 SBS >> Multiple Authentication Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts