RE: Digest authentication does not work for HTTPS-requests through MS
- From: Shijaz <Shijaz@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 19 Jun 2006 13:19:02 -0700
Hi,
I've seen this problem happening when the network range in your "Internal"
network is not configured correctly and you are using the "single network
interface" model.
If you're facing the same problem, a quick way to check is:
While the client is trying to use a site with https or digest auth (eg.
gmail.com or hotmail.com), run and observe a query on the Logging tab (in the
Monitoring option) on ISA. If you see the source network and destination
network are both "Internal" then you need to check your internal network
settings.
In your iSA config, check the Internal network settings and make sure it
includes your private IP range that you use in your organization only.
--
Shijaz
www.shijaz.com/isaserver
"stealth" wrote:
Description.
We observe permanently reproducing issue with authentication failure
when connecting to HTTPS sites using digest authentication method on MS
ISA 2004 proxy server. Clients use Internet Explorer 6.0.
Internet Explorer behaves unexpectedly with digest authentication and
HTTPS web sites. Its behavior is predefined by the first URL user
visits. If this URL starts as https://, i.e. the first visited site
uses HTTPS, than IE goes in the endless timeout. If the first visited
URL is a usual HTTP request, IE successfully passes authentication
phase and is able to browse HTTP sites. Other authentication types,
such as Basic and Windows Integrated, work as expected.
All the testing was performed having SP1 for ISA Server 2004 installed.
Recently, we installed the last available service pack 2 and
surprisingly found that digest authentication doesn't work with HTTP
requests as well. We searched through the groups, but without success.
Please let us know if this is a known issue and if there is a
workaround for it.
Here is a Configuration of our environment:
Client
Windows XP Professional Service Pack 2 with latest updates and
hotfixes. Internet Explorer 6.0
(6.0.2900.2180.xpsp_sp2_gdr.0500301-1519).
Windows Firewall disabled
ISA Server client is not used.
Proxy Server
Software installed:
1.Windows Server 2003 Enterprise Edition
·Service Pack 1 for Windows Server 2003
·Latest updates and hotfixes
2.ISA Server 2004 Standard Edition
·Service Pack 1 for ISA Server 2004 Standard Edition
·Service Pack 2 for ISA Server 2004 Standard Edition
Windows Firewall disabled.
Domain Controller
Software installed:
1.Windows Server 2003 Enterprise Edition
·Service Pack 1 for Windows Server 2003
·Windows Firewall disabled.
- References:
- Prev by Date: Re: ISA or hardware?
- Next by Date: Re: Setup Custom Errors
- Previous by thread: Digest authentication does not work for HTTPS-requests through MS ISA Server 2004
- Next by thread: Re: ISA as an edge firewall, 2 NICs, and VPN site to site needed
- Index(es):
Relevant Pages
|
Loading
