Re: [ISA 2004] Probleme mit WUS

From: Tom Haese (TomHaese_at_discussions.microsoft.com)
Date: 03/11/05 

Date: Fri, 11 Mar 2005 06:11:03 -0800

Hallo Jens

Bn grad noch über folgenden Bugreport gestossen:

Formularbeginn
Synchronisation Fails dues to Authentication Failure
Formularende
 
SYMPTOMS:

WUS fails to download content into D drive.
Under certain circumstances, syncrhoisation of your WUS server with
Microsoft can fail with errors such as the following:

WebException: The underlying connection was closed: Unable to connect to the
remote server. --->
System.NullReferenceException: Object reference not set to an instance of an
object.
at System.Net.HttpWebRequest.CheckFinalStatus()
at System.Net.HttpWebRequest.EndGetRequestStream (IAsyncResult asyncResult)
at System.Net.HttpWebRequest.GetRequestStream()
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke (String
methodName, Object[] parameters)
at
Microsoft.WindowsUpdateServices.ServerSyncWebServices.ServerSync.ServerSyncProxy.GetAuthConfig()
at
Microsoft.WindowsUpdateServices.ServerSync.ServerSyncLib.InternetGetServerAuthConfig(ServerSyncProxy proxy,WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.WindowsUpdateServices.ServerSync.ServerSyncLib.Authenticate(AuthorizationManager
authorizationManager, Boolean checkExpiration, ServerSyncProxy proxy, Cookie
cookie, WebServiceCommunicationHelper webServiceHelper)
at
Microsoft.WindowsUpdateServices.ServerSync.CatalogSyncAgentCore.InternalGetConfig()
at
Microsoft.WindowsUpdateServices.ServerSync.CatalogSyncAgentCore.CatalogSyncThreadProcessReal(Boolean allowRedirect)
WORKAROUND
If you are using ISA server, then enable Digest Authentication on the ISA
server.
CAUSE
By default WUS used digest authentication when authenticating with ISA. If
you use only Integrated (NTLM) authentication on the ISA server WUS fails to
authenticate synchronisation fails. There is currently no way to change the
authentication method within WUS - it is not possible to add more than one
type of authentication method or to choose which is used.
STATUS
Microsoft confirmed that this is a bug. They hope to resolve it in the RC.
MORE INFORMATION

Das wird wohl das Problem sein... Nun ich kann wohl oder über nix anderes
machen als auf nen Patch warten, da wir die Authentifizirung nicht ändern
können.

Internette Grüsse
om

"Jens Baier" wrote:

> Hi,
>
> > Aktion: Zulassen
> > Zugelassene Protokolle: HTTP, HTTPS
> > Von: WUS-Server IP
> > Nach: Extern (könnte man ja später dann noch einschränken)
> > Bedingung: Alle Benutzer
>
> OK, so sieht meine Regel auch aus
>
> > Troz allem schlägt mir der Download fehl wenn ich im WUS einen Download
> > auswähle. Mache ich irgendwo einen Überlegungsfehler?
>
> eigentlich nicht! Welche Fehlermeldung kommt genau? Steht was in der
> Ereignisanzeige?
> Wird zu dem Zeitpunkt des WUS Verbindungsaufbau etwas geblockt? Schau mal in
> das Realtime Monitoring vom ISA.
> Wo hast Du denn die Synchronisation eingestellt? Wenn Du die WUS-GUI
> startest (Internet Explorer) und dann auf Options klickst und dort
> Synchronization Options auswaehlst, kannst Du ja konfigurieren, ob die
> Verbindung ueber einen Proxy gehen soll. Hast Du das ausgewaehlt? Wnn ja,
> brauchst Du da keinen Benutzernamen angeben. Wenn Du keine
> Proxy-Einstellungen konfiguriert hast, muss Dein WUS Server eine Secure NAT
> Client sein.
>
> Gruss Jens
> www.nt-faq.de
>
>
>

Relevant Pages

  • Re: NTLM Authentication on IIS 6.0
    ... A couple of areas on the Intranet are restricted. ... Windows Intergrated Authentication enabled on the couple of pages that ... I use the administrator un/pw and that fails. ... server, it works everytime. ...
    (microsoft.public.inetserver.iis.security)
  • RE: IIS Authentication Methods
    ... Integrated fails, it will NOT fall back to Basic. ... When you use Netscape to access a site with both authentication methods ... > that was LOCAL to the server. ... > local user on the web server. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Integrated Windows Authentication Fails from Client PCs
    ... and several web services within the web site ... to allow access through Integrated Windows Authentication. ... the Web Services from an RDP session with the server it works. ... access the Portal from any other machine, it just fails. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Forms Authentication works on Localhost/App1 but not on MaschineName/App1
    ... Forms Authentication works fine ... fails if I use the server name ... >I'm running on an XP and have the appropriate settings ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Kerberos machine authentication - apparent authentication fail
    ... > until logon), the wireless connection can kick off when it is ready. ... > was confirmed in the server event logs with IAS (i set that up as the radius ... > as an ordinary user kicks in and takes over from the machine authentication. ... > while the network sorts itself out and a double click on a network link of ...
    (microsoft.public.windows.server.security)