RE: Windows 98 clients behind ISA 2004 web proxy?
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 7 Dec 2005 16:24:22 -0600
It wasn't a cooked up capture, it's the one that I had on hand, so it
was real, its just that that the SMTP relay was on the ISA firewall and
the ISA firewall was a domain member, and you got me all confused with
the Kerberos authentication protocol mumbo jumbo and you said Kerberos
and hooked that into GSSAPI and so I think you're doing a Clinton on me
here so I'm going to have to impeach and disabar you and make stop
dragging sawbucks through trailer parks. The auth frames look exactly
the same.
So, for obfuscating my point by introducing Kerberos where it wasn't an
issue, and rising up again the non-issue of clear text, and for making
it seem like we disagree when we actually agree regarding the ATRN
issue, I'm going to have to not only take back the "I pR0neD Greggo and
I'll I got was this T-shirt" t-shirt, I'm also going to give you back
your butt munch, and call you as ass monkey on top of it.
And the Panglossian solution is also the Liebnizian one, making it the
best of all possible solutions.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**
> -----Original Message-----
> From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
> Sent: Wednesday, December 07, 2005 3:49 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: Windows 98 clients behind ISA 2004 web proxy?
>
> http://www.ISAserver.org
>
> Well, that's not fair at all. I wasn't disputing that Auth
> could not use
> NTLM- Auth, by RFC 2554, can use really whatever it wants as
> long as both
> ends support it. In the absence of saying you were using
> NTLM, one would
> logically base a response on the default, base64 clear text encoding.
>
> Regardless, the "clear text" aspect of the ATRN solution is
> the least of the
> worries. So I think I still get a the shirt. Besides, correctly
> ascertaining that you used a "cooked" capture last night
> should be more than
> enough. I'll take "butt munch." Send a shirt ;)
>
> And I think Jim owes me one too, but he never responded to
> the last spank I
> gave him ;)
>
> t
>
>
> ----- Original Message -----
> From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Wednesday, December 07, 2005 12:47 PM
> Subject: [isalist] RE: Windows 98 clients behind ISA 2004 web proxy?
>
>
> http://www.ISAserver.org
>
> Hi Tim,
>
> Cool. I'll have to pull those Win95 CDs out of the museum.
>
> BTW -- I think I'm going to have to revoke your T-shirt. I repro'd the
> config using the Internal to DMZ SMTP outbound connection from the
> Exchange Server to the IIS 6 box in the DMZ, and NTLM does
> work, and the
> SMTP relay is not a domain member. However, I might send you a "I
> pL0NkEd Greg and all I got was this lousy T-shirt" since I'm not jiggy
> on exactly what GSSAPI does and how it works with NTLM authentication.
>
> However, I will take back calling you a butt munch, since I'm in the
> Christmas spirit.
>
> GMT
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://spaces.msn.com/members/drisa/
> Book: http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> **Who is John Galt?**
>
>
>
> > -----Original Message-----
> > From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx]
> > Sent: Wednesday, December 07, 2005 2:22 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: Windows 98 clients behind ISA 2004 web proxy?
> >
> > http://www.ISAserver.org
> >
> > There is an active directory connector client app you can use
> > to join the
> > domain, use NTLMv2, etc.
> >
> > ----- Original Message -----
> > From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
> > To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> > Sent: Wednesday, December 07, 2005 12:14 PM
> > Subject: [isalist] RE: Windows 98 clients behind ISA 2004 web proxy?
> >
> >
> > http://www.ISAserver.org
> >
> > Hey boys,
> >
> > Does that make the 9x client a domain member? I have to admit that I
> > haven't touched a 9x box since about 1999/2000.
> >
> > Thanks!
> > Tom
> >
> > Thomas W Shinder, M.D.
> > Site: www.isaserver.org
> > Blog: http://spaces.msn.com/members/drisa/
> > Book: http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> > **Who is John Galt?**
> >
> >
> >
> > > -----Original Message-----
> > > From: Brian Boyes [mailto:BrianB@xxxxxxxxx]
> > > Sent: Wednesday, December 07, 2005 2:10 PM
> > > To: [ISAserver.org Discussion List]
> > > Subject: [isalist] RE: Windows 98 clients behind ISA 2004
> web proxy?
> > >
> > > http://www.ISAserver.org
> > >
> > > > Can anyone confirm that a Windows 98 domain member and
> user client
> > > > will successfully authenticate behind an ISA 2004 web
> > proxy without
> > > > having to type in user credentials for each IE window?
> > >
> > > Danny, we are running that particular setup here and it has worked
> > > successfully so far. In our situation, I have installed the
> > > AD client on the
> > > 9x stations and the MSP client from MSProxy 2.0. I have been
> > > told (but not
> > > tested) the ISA firewall client will work as well.
> > >
> > > Before anyone asks, we are running these 9x stations because
> > > they have some
> > > legacy software on them that won't work in 2K or XP.
> > >
> > > Brian
> > >
> > >
> > > ------------------------------------------------------
> > > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server FAQ:
> http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > You are currently subscribed to this ISAserver.org Discussion
> > > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > > To unsubscribe visit
> > > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as:
> > thor@xxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as:
> thor@xxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
Other related posts:
