RE: ntlm auth issue

  • From: "Don Bentz" <Don@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 9 May 2003 12:22:56 -0500

I'll try that Tom, but that was the first thing that I did.
*.domainname.com
 
 
Don Bentz, MCSE, CCA, MCP+I
Computer Management Systems, Inc.
216 South Main Street
Columbia City, IN  46725
[260] 248-2191 V  [260] 248-2801 F
www.cmsinetworks.com <http://www.cmsinetworks.com/>  
 
Did you know.. "Did you know that Microsofts website consists of six
clusters, each with 10 quad-processor Intel Pentium III Xeon-based
servers and running on RC1 of XP Server"

        -----Original Message-----
        From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx] 
        Sent: Friday, May 09, 2003 12:11 PM
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: ntlm auth issue
        
        
        http://www.ISAserver.org
        
        
        Hi Don,
         
        Configure the site for Direct Access so that you bypass the Web
Proxy service.
         
        HTH,
        Tom
        Thomas W Shinder
        www.isaserver.org/shinder <http://www.isaserver.org/shinder>  
        ISA Server and Beyond: http://tinyurl.com/1jq1
        Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp> 
        
         

                -----Original Message-----
                From: Don Bentz [mailto:Don@xxxxxxxxxxx] 
                Sent: Friday, May 09, 2003 12:01 PM
                To: [ISAserver.org Discussion List]
                Subject: [isalist] ntlm auth issue
                
                
                http://www.ISAserver.org
                
                
                I have a client that is using a outside vendor (ASP)
which runs their apps through Citrix Nfuse. When running the app, I get
the error Proxy connection failed: Unsupported proxy authentication
scheme. Looking this up in Citrix gives me  KB CTX784366: 

                +++++++++++++++++++++++++++++

                The 6.30 ICA clients do not support NTLM authentication.

                Version 6.30 of the ICA client includes a feature
allowing the ICA traffic to tunnel through a secure proxy server en
route to the MetaFrame server. Some secure proxy servers, such as
Microsoft Internet Security and Acceleration (ISA) Server, require
Integrated Windows (NTLM) authentication. 

                At the current time, Citrix ICA clients do not support
NTLM authentication at the proxy server. For ICA traffic to traverse the
proxy server, the proxy authenticaiton type should be set to None or
Basic. 

                +++++++++++++++++++++++++++++

                Ok, I've tried this and that on ISA. Any thoughts?

                 

                 
                Don Bentz, MCSE, CCA, MCP+I
                Computer Management Systems, Inc.
                216 South Main Street
                Columbia City, IN  46725
                [260] 248-2191 V  [260] 248-2801 F
                www.cmsinetworks.com <http://www.cmsinetworks.com/>  
                 
                ------------------------------------------------------
                List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                ------------------------------------------------------
                Exchange Server Resource Site:
http://www.msexchange.org/
                Windows Security Resource Site:
http://www.windowsecurity.com/
                Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
                ------------------------------------------------------
                You are currently subscribed to this ISAserver.org
Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx
                To unsubscribe send a blank email to
$subst('Email.Unsub') 

                This E-Mail is confidential. It is not intended to be
read, copied, disclosed or used by any person other than the
recipient.Unauthorised use, disclosure, or copying is strictly
prohibited and may be unlawful. Computer Management Systems, Inc.
disclaims any liability for any action taken in connection of this
E-Mail. The comments or statements expressed in this E-Mail are not
necessarily those of CMS, Inc. or its subsidiaries or affiliates.

                postmaster@xxxxxxxxxxx <mailto:postmaster@xxxxxxxxxxx> 

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Exchange Server Resource Site: http://www.msexchange.org/
        Windows Security Resource Site: http://www.windowsecurity.com/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: don@xxxxxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 


This E-Mail is confidential. It is not intended to be read, copied, disclosed 
or used by any person other than the recipient.


Unauthorised use, disclosure, or copying is strictly prohibited and may be 
unlawful. Computer Management Systems, Inc. disclaims any liability for any 
action taken in connection of this E-Mail. The comments or statements expressed 
in this E-Mail are not necessarily those of CMS, Inc. or its subsidiaries or 
affiliates.

postmaster@xxxxxxxxxxx

Other related posts: