[isapros] Re: [isalist] Problem viewing external Sharepoint site
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isapros@xxxxxxxxxxxxx>
- Date: Tue, 19 Sep 2006 08:58:00 -0500
OK, I thought it was an SBS problem :)
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Jim Harrison
Sent: Tuesday, September 19, 2006 8:50 AM
To: isapros@xxxxxxxxxxxxx
Subject: RE: [isapros] [isalist] Problem viewing external
Sharepoint site
Yasilly; she said "not published through ISA Server"...
This is an ISA fwd scenario, if I read her mails right.
Amy - were you able to gather isabpapack data?
________________________________
From: isapros-bounce@xxxxxxxxxxxxx on behalf of Thomas W Shinder
Sent: Tue 9/19/2006 5:41 AM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] [isalist] Problem viewing external Sharepoint
site
Users Repeatedly Prompted for Credentials
Problem: Users visiting a Web site published through ISA Server
that requires authentication are repeatedly prompted for credentials,
even after supplying valid credentials.
Cause: This may occur if Windows integrated authentication
(NTLM) is enabled on both the ISA Server computer and on Internet
Information Services (IIS) of the published Web server. This occurs in a
publishing scenario when ISA Server uses the same HTTP headers for
authentication as those used by the Web server. The client is prompted
for credentials by ISA Server, and ISA Server forwards the request
without the credentials to the published Web site. This causes the Web
site to prompt for authentication. Multiple authentication requests
cause the Web browser to interpret the credentials as incorrect, and
users may be prompted multiple times for credentials if the Web browser
opens multiple connections.
Solution: As a workaround, do any of the following:
* Use SecurID instead of NTLM on the ISA Server computer.
* Use RADIUS instead of NTLM on the ISA Server computer.
* Use Basic authentication instead of NTLM on the internal Web
server.
* Use an SSL connection with Basic authentication delegation.
Thomas W Shinder, M.D.
Site: www.isaserver.org <http://www.isaserver.org/>
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7>
MVP -- ISA Firewalls
________________________________
From: isapros-bounce@xxxxxxxxxxxxx
[mailto:isapros-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak
Sent: Monday, September 18, 2006 3:56 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] FW: [isalist] Problem viewing
external Sharepoint site
Meant to post to this list in the first place.
Amy
________________________________
From: isalist-bounce@xxxxxxxxxxxxx
[mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Amy Babinchak
Sent: Monday, September 18, 2006 4:48 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Problem viewing external Sharepoint
site
Hi guys,
I've got a charity case here with the company that
supports SBS user groups for Microsoft. They say that users behind ISA
are unable to view their public Sharepoint site. When I attempt to view
the site I am challenged for my username and password about 7 times then
it displays. However, when I try to move to another page the website
changes to a page that tells me my credentials are incorrect. I'm
leaning toward saying that the website needs help but he insists that
only people behind ISA servers have any problem with the site. I've
attached my log.
There are a wider variety of error messages that I'm
used to seeing. Do you think this is a website issue or something I can
change on my end to make viewing this site easier?
Thanks,
Amy
Other related posts:
