[isapros] [isalist] Problem viewing external Sharepoint site
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isapros@xxxxxxxxxxxxx>
- Date: Tue, 19 Sep 2006 07:41:56 -0500
Users Repeatedly Prompted for Credentials
Problem: Users visiting a Web site published through ISA Server that
requires authentication are repeatedly prompted for credentials, even after
supplying valid credentials.
Cause: This may occur if Windows integrated authentication (NTLM) is enabled
on both the ISA Server computer and on Internet Information Services (IIS)
of the published Web server. This occurs in a publishing scenario when ISA
Server uses the same HTTP headers for authentication as those used by the
Web server. The client is prompted for credentials by ISA Server, and ISA
Server forwards the request without the credentials to the published Web
site. This causes the Web site to prompt for authentication. Multiple
authentication requests cause the Web browser to interpret the credentials
as incorrect, and users may be prompted multiple times for credentials if
the Web browser opens multiple connections.
Solution: As a workaround, do any of the following:
.
Use SecurID instead of NTLM on the ISA Server computer.
.
Use RADIUS instead of NTLM on the ISA Server computer.
.
Use Basic authentication instead of NTLM on the internal Web server.
.
Use an SSL connection with Basic authentication delegation.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: <http://tinyurl.com/3xqb7> http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
_____
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx] On
Behalf Of Amy Babinchak
Sent: Monday, September 18, 2006 3:56 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] FW: [isalist] Problem viewing external Sharepoint site
Meant to post to this list in the first place.
Amy
_____
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Amy Babinchak
Sent: Monday, September 18, 2006 4:48 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Problem viewing external Sharepoint site
Hi guys,
I've got a charity case here with the company that supports SBS user groups
for Microsoft. They say that users behind ISA are unable to view their
public Sharepoint site. When I attempt to view the site I am challenged for
my username and password about 7 times then it displays. However, when I try
to move to another page the website changes to a page that tells me my
credentials are incorrect. I'm leaning toward saying that the website needs
help but he insists that only people behind ISA servers have any problem
with the site. I've attached my log.
There are a wider variety of error messages that I'm used to seeing. Do you
think this is a website issue or something I can change on my end to make
viewing this site easier?
Thanks,
Amy
Other related posts:
