Re: Digest authentication with ISA 2004 and SGD 4.3.1 (SUN)

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi Jim,

thank you for your reply but my ISA version is 2004 SP3 , with digest
authentication enabled or not i have still the same trouble and i have no
errors 64.

have you got others ideas ?

"Jim Harrison (ISA SE)" wrote:

WDigest auth cannot work for SSL tunnels.
http://www.microsoft.com/technet/isa/2006/authentication.mspx

Also, any time you're working with SSL tunnels, the only state ISA can log
is either 64 or 995, because it has no information about the underlying
protocol state.

--
Jim Harrison (ISA SE)

This posting implies no warranty and confers no rights.
http://catb.org/~esr/faqs/smart-questions.html



"yann" <yann@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:B40099C5-1446-4EE3-835E-80B1C4DFE23B@xxxxxxxxxxxxxxxx
Nobody can help me, if you want more information, what i know is that this
web application uses SSL Tunnel, when i log traffic from users i see allowed
connection and after, i have an error with status : 995 The I/O operation
has
been aborted because of either a thread exit or an application request.

thank you

"yann" wrote:

Hello everyone,

we have two types of proxy architecture the first old one is ISA 2000 only
configured as a proxy cache and the other one ISA 2004 SP3 configured also
as
a proxy cache but also as a web forwarders to a frond end ISA 2004 SP3
server.
Since 3 weeks, an external provider has changed his application to a new
version that use SUN SECURE GLOBAL DESKTOP 4.3.1 and now, nobody on our
network can connect to this application, on both proxy servers, when
digest
authentication is enabled, they have an authentication popup called DIGEST
it
seems to be a java popup, so we tried to disable digest authentication and
it
seems to be better but before the connexion, we have an error that says
ERROR
Secure Global desktop client and your proxy XXX requires an authentication
method not supported by this secure global desktop client.
So now, i don't know what to do, except creation rules on each Internet
Explorer to bypass my proxy servers but i don't want to.
The other check, i have done is to create on each proxy server a
specifical
rule using the URL of my external provider for anonymous access but i have
the same issue.

Can you tell me what to do ?

For your information, my provider told me that it works with ISA 2006
so...

Thank you for your help.

.



Relevant Pages

  • Re: ISA 2004 and Real Player
    ... Now I understand about no proxy and Real Player. ... beacuse we use Websense with ISA. ... bypass the requiremnt for user authentication when processing Real Player ...
    (microsoft.public.isa.configuration)
  • Re: Other services through proxy...
    ... Windows Integrated Authentication which thos OS's cannot do. ... browser's proxy settings have a place to supply credentials then that "may" ... The views expressed, are my own and not those of my employer, or Microsoft, ... Understanding the ISA 2004 Access Rule Processing ...
    (microsoft.public.isa)
  • Re: Rule doesnt apply
    ... Do they have the proxy set in the IE ... Your problem is related to user authentication that for one of the reasons ... somehow to ISA in order for the rules based on domain groups to work. ...
    (microsoft.public.isaserver)
  • Help: Connecting to a password-protected webservice through a proxy server (ISA 2000)
    ... I am trying to access a webservice that uses windows' "built-in ... authentication" and my client program must acccess it through an ISA ... I then associated a proxy with the webservice and it appears as ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Question For Any FrontPage Users Publishing Webs from SBS 2003
    ... I have made the changes to my ISA configuration that you suggested. ... > Thanks for using SBS newsgroup. ... > Frontpage through ISA2004 via either web folder or frontpage. ... Please disable request authentication on ISA to allow the anonymous ...
    (microsoft.public.windows.server.sbs)