ISA Authentication Problem

From: Aaron Woland (anonymous_at_discussions.microsoft.com)
Date: 04/26/04


Date: Mon, 26 Apr 2004 10:35:52 -0700

I have two users in the organization that are not
authenticating correctly with our ISA Server...

Some background info:
- We are using it only as a proxy server, not as a
firewall.
- The users browsers are configured by a configuration
script.

The users that are experiencing the problem will attempt
to connect to an outside web site, and be prompted for
authentication by our proxy server (ISA SP1). Typcially,
the authentication happens behind the scenes & users are
never prompted to authenticate.

With the problem users, the name that is listed in
username field is incorrect. (i.e: usersname is "abc02",
the name listed in the username box is "abc01".

1) Why is this happening?
2) Where does it store this information?

I have searched the registry and cannot find where this
information would be stored.

If we delete the user's profile & allow a new one to be
created when logging in, the problem is gone. So, it is
definitely part of the profile, but what/where??

Thanks to anyone who can help.

- Aaron.



Relevant Pages

  • [REVS] NTLM HTTP Authentication is Insecure By Design
    ... in front of a web server, and that proxy server shares a single TCP ... These are attacks that make use of non-RFC HTTP requests (HTTP Request ... the authentication is associated with the ...
    (Securiteam)
  • RE: Certificate names and RPC over HTTP for Exchange 2003
    ... Every ISA ... the server in limbo, expecting further requests, thus keeping the channel ... tick "On fast networks, connect using HTTP first..." ... All of my clients use Forms Based Authentication but you are using HTTP ...
    (microsoft.public.isa.configuration)
  • Re: RSA with OWA and FBA
    ... So RSA SecurID running on ISA doesn't support SSO. ... Troubleshooting Unsupported Configurations in ISA Server 2004 ... SecurID authentication on ISA Server: ...
    (microsoft.public.isa)
  • RE: Proxy Authentication
    ... Both the old and new server have only one NIC and we only ... >> trouble getting authentication to work like in Proxy 2.0. ... >> allowed to browse through the proxy server. ... I would also like this prompt to be able to handle an expired ...
    (microsoft.public.isa.clients)
  • Re: Publish OWA2K3 on single-homed ISA in a DMZ?
    ... server before allowing access to the OWA server. ... I decided to move the ISA ... HTTPS traffic to the ISA server which then "reverse proxies" OWA out to the ... Microsoft will not support AD authentication in a DMZ or internet ...
    (microsoft.public.isaserver)