ISA Authentication Problem

From: Aaron Woland (anonymous_at_discussions.microsoft.com)
Date: 04/26/04 

Date: Mon, 26 Apr 2004 10:35:52 -0700

I have two users in the organization that are not
authenticating correctly with our ISA Server...

Some background info:
- We are using it only as a proxy server, not as a
firewall.
- The users browsers are configured by a configuration
script.

The users that are experiencing the problem will attempt
to connect to an outside web site, and be prompted for
authentication by our proxy server (ISA SP1). Typcially,
the authentication happens behind the scenes & users are
never prompted to authenticate.

With the problem users, the name that is listed in
username field is incorrect. (i.e: usersname is "abc02",
the name listed in the username box is "abc01".

1) Why is this happening?
2) Where does it store this information?

I have searched the registry and cannot find where this
information would be stored.

If we delete the user's profile & allow a new one to be
created when logging in, the problem is gone. So, it is
definitely part of the profile, but what/where??

Thanks to anyone who can help.

- Aaron.

Relevant Pages

  • [REVS] NTLM HTTP Authentication is Insecure By Design
    ... in front of a web server, and that proxy server shares a single TCP ... These are attacks that make use of non-RFC HTTP requests (HTTP Request ... the authentication is associated with the ...
    (Securiteam)
  • Re: RSA with OWA and FBA
    ... So RSA SecurID running on ISA doesn't support SSO. ... Troubleshooting Unsupported Configurations in ISA Server 2004 ... SecurID authentication on ISA Server: ...
    (microsoft.public.isa)
  • RE: Proxy Authentication
    ... Both the old and new server have only one NIC and we only ... >> trouble getting authentication to work like in Proxy 2.0. ... >> allowed to browse through the proxy server. ... I would also like this prompt to be able to handle an expired ...
    (microsoft.public.isa.clients)
  • Re: Publish OWA2K3 on single-homed ISA in a DMZ?
    ... server before allowing access to the OWA server. ... I decided to move the ISA ... HTTPS traffic to the ISA server which then "reverse proxies" OWA out to the ... Microsoft will not support AD authentication in a DMZ or internet ...
    (microsoft.public.isaserver)
  • Authentication Problem
    ... Win2k SP4 member server part of a Wink2 Domain but experience the following: ... Set which will allow anonymous software to get updated files like Windows ... If I enable authentication and it's exactly what I want to do (because I ... already setup 2 other ISA servers that way before whitout any problem), ...
    (microsoft.public.isa.clients)