Web Proxy / Firewall Client prompting for authentiation

From: myxiplx (ross.smith_at_robinsons-dot-com.no-spam.invalid)
Date: 03/10/05 

Date: Thu, 10 Mar 2005 03:41:24 -0600

We have recently installed ISA 2004, with access policies configured
on a per-user basis. We use IE 6 fully patched, with ISA configured
as a standard IE proxy and autoconfigured with WPAD.

Several of our users are seeing intermittent login dialog boxes asking
for authentication to connect to the ISA server. One user is seeing
this dialog box for every single page he attempts to access, even
installing the firewall client has no effect, he is still constantly
prompted for authentication.

We have turned off the setting 'Require authentication' on the
Internal network, we are running a Win2k domain and most users are
running Windows XP SP1 with all current security patches.

There seem to be a lot of people having authentication issues with a
login dialog appearing almost at random. Has anyone else has this
kind of problem? Does anyone have any idea as to what is causing
this or how I can work around it?

So far my best guess is a knowledgebase article which states that IE
can only use integrated authentication for intranet (local) sites,
and that any URL containing periods will not be considered local, but
I really have no idea why this would just apply for a few users:
http://support.microsoft.com/default.aspx?scid=kb;en-us;258063

For the one user who is having this problem constantly, a different
user account logged on to his computer can access the internet fine
with no prompts. His account logged on to any other computer always
prompts for a username and password. Integrated authentication
simply will not work.

And finally, one additional point for this user is that when the login
dialog box appears, it automatically gives him a choice of two
usernames, one of which is incorrect.

The other users who are seeing this intermittently don't have a choice
of usernames. They either have a blank login box, or the correct
username entered.

thanks,

Ross

Relevant Pages

  • Re: RWW authentication
    ... By entering just the username without any ... Much of this RWW info is right inside of there. ... but the Isa firewall ... SSL authentication seems to work just fine however on the actual RWW login ...
    (microsoft.public.windows.server.sbs)
  • Re: FBA question for OWA
    ... Duplicate logons are usually caused by misconfigured authentication ... You can't do that with the ISA version of FBA, ... server in our DMZ. ... Windows login box. ...
    (microsoft.public.exchange.admin)
  • Re: ISA Question.
    ... username / IP address when anyone uses the internet but does not need to ... members of the Internet Users group, so authentication is required to verify group membership. ... If you change the rules to allow access to all users, and configure ISA not to demand authentication even when not required, then you'll be good to go. ...
    (microsoft.public.windows.server.sbs)
  • Re: Publishing outlook web access with ISA 2004
    ... It seems that ISA 2004 uses it's own login ... screen when connecting to Exchange 2004 OWA using Forms ... So I've tried to disable authetication on the ISA ... server itself by unchecking all authentication methods on the ...
    (microsoft.public.isa)
  • Re: Mozilla firefox browser proxy authentication
    ... autentication enabled on the isa server itself. ... basic authentication you will just have to enter your domain user/pass ... > This is related to an earlier post I made concerning Firefox. ... I have to enter my username and password in order for it to ...
    (microsoft.public.backoffice.smallbiz2000)