[isapros] Re: FW: [isalist] Problem viewing external Sharepoint site
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isapros@xxxxxxxxxxxxx>
- Date: Mon, 18 Sep 2006 18:51:58 -0500
Users Repeatedly Prompted for Credentials
Problem: Users visiting a Web site published through ISA Server that
requires authentication are repeatedly prompted for credentials, even
after supplying valid credentials.
Cause: This may occur if Windows integrated authentication (NTLM) is
enabled on both the ISA Server computer and on Internet Information
Services (IIS) of the published Web server. This occurs in a publishing
scenario when ISA Server uses the same HTTP headers for authentication
as those used by the Web server. The client is prompted for credentials
by ISA Server, and ISA Server forwards the request without the
credentials to the published Web site. This causes the Web site to
prompt for authentication. Multiple authentication requests cause the
Web browser to interpret the credentials as incorrect, and users may be
prompted multiple times for credentials if the Web browser opens
multiple connections.
Solution: As a workaround, do any of the following:
* Use SecurID instead of NTLM on the ISA Server computer.
* Use RADIUS instead of NTLM on the ISA Server computer.
* Use Basic authentication instead of NTLM on the internal Web
server.
* Use an SSL connection with Basic authentication delegation.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak
Sent: Monday, September 18, 2006 3:56 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] FW: [isalist] Problem viewing external
Sharepoint site
Meant to post to this list in the first place.
Amy
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak
Sent: Monday, September 18, 2006 4:48 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Problem viewing external Sharepoint site
Hi guys,
I've got a charity case here with the company that supports SBS
user groups for Microsoft. They say that users behind ISA are unable to
view their public Sharepoint site. When I attempt to view the site I am
challenged for my username and password about 7 times then it displays.
However, when I try to move to another page the website changes to a
page that tells me my credentials are incorrect. I'm leaning toward
saying that the website needs help but he insists that only people
behind ISA servers have any problem with the site. I've attached my log.
There are a wider variety of error messages that I'm used to
seeing. Do you think this is a website issue or something I can change
on my end to make viewing this site easier?
Thanks,
Amy
Other related posts:
