Re: NetworkCredentials & Authentication Modules for WebProxy consumption

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: E. Apapados (eapapa_at_hotmail.com)
Date: 06/25/04 

Date: Fri, 25 Jun 2004 17:38:26 GMT

Mike thank you for your reply.

Your postings were the starting point to my investigation and as a matter of
fact I was about to contact you myself.

Our application has been deployed to several sites where the http proxy of
choice is MS ISA 2000 and all my testing are based on this product.

As you point out, following the 'trick' of assigning the credentials to the
httpWebRequest object does the job.
However in my experience this only works if the authentication method
required by the proxy is 'Basic' (Base64) and only 'Basic'.

ISA 2000 also supports 'Digest' and 'Integrated' (Former NTLM and Kerberos)
and so far I had no lack with those.

The proxies that you are using (Raptor & Proxy+) do they support these
types? and if so, have you managed to successfully authenticate requests
under these types?

Furthermore by enumerating the AuthenticationManager.RegisteredModules CF
SP2 states that both 'Basic' and 'Digest' are supported but so far 'Digest'
credentials do not seem to get authenticated on the ISA.

Once again thank you for your reply and I hope that someone from Microsoft
will comment soon.

Relevant Pages

  • Re: re:Authentication Prompts in IE
    ... - My Deny rules don't require authentication. ... rules - anyone that has valid credentials can navigate).. ... - My ISA is not configured with 'Require Authentication For All users'. ... Because ISA is configured to only use NTLM, ...
    (microsoft.public.isa.clients)
  • Re: ISA 2004 and Real Player
    ... Now I understand about no proxy and Real Player. ... beacuse we use Websense with ISA. ... bypass the requiremnt for user authentication when processing Real Player ...
    (microsoft.public.isa.configuration)
  • Re: Proxy Authentication
    ... > still learning ISA and how to fully leverage it...the setting that you ... > The caching of credentials was just another thought that entered my mind, ... > in fact not getting authenticated for internet activity...but I would have ... Authentication is processed at the domain level, ...
    (microsoft.public.isa)
  • Re: Other services through proxy...
    ... Windows Integrated Authentication which thos OS's cannot do. ... browser's proxy settings have a place to supply credentials then that "may" ... The views expressed, are my own and not those of my employer, or Microsoft, ... Understanding the ISA 2004 Access Rule Processing ...
    (microsoft.public.isa)
  • Re: Rule doesnt apply
    ... Do they have the proxy set in the IE ... Your problem is related to user authentication that for one of the reasons ... somehow to ISA in order for the rules based on domain groups to work. ...
    (microsoft.public.isaserver)