+ Post New Thread
Results 1 to 7 of 7
Windows Thread, ISA Server 2004 Authentication in Technical; I don't know what's changed, nothing that I can think of. When you run a query in Logging and it ...
  1. #1
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,639
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    ISA Server 2004 Authentication

    I don't know what's changed, nothing that I can think of.

    When you run a query in Logging and it displays the Client Username they all appear as Anonymous, but it wasn't always like this.

    I've checked the Authentication settings for the Local Network and Local Host and both are set to 'Require all users to Authenticate' using 'Integrated',

    What's wrong with that? Surely it should be showing them up as they're Windows logon names not Anonymous?

  2. #2
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,527
    Thank Post
    107
    Thanked 89 Times in 75 Posts
    Blog Entries
    46
    Rep Power
    40

    Re: ISA Server 2004 Authentication

    (sp3)
    I've got random users appearing as anonymous.
    It happens on win xp clients and not on 2k clients

    furthermore my first rule is a "banned rule" that denies access to members of an arbitrary security group.
    for NO APPARENT REASON, anonymous matches this rule.

    require all users to authenticate has to be off in order for anonymous to work
    disabling banned rule causes anonymous to find the rule (#9) I want it to use.

  3. #3
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,639
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: ISA Server 2004 Authentication

    If you have an anonymous Access Rule (which I guess a deny would count too) which is applied before other rules, then Usernames are not logged.

  4. #4
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,527
    Thank Post
    107
    Thanked 89 Times in 75 Posts
    Blog Entries
    46
    Rep Power
    40

    Re: ISA Server 2004 Authentication

    the 1st rule (banned) wasnt an anonymous access rule.

  5. #5
    mrforgetful's Avatar
    Join Date
    May 2006
    Posts
    1,639
    Thank Post
    7
    Thanked 15 Times in 15 Posts
    Rep Power
    22

    Re: ISA Server 2004 Authentication

    Was something I read somewhere but I dont' think that's the case sorry.

    My first rule is for 'Pupils' only and I've got the problem.

  6. #6
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,527
    Thank Post
    107
    Thanked 89 Times in 75 Posts
    Blog Entries
    46
    Rep Power
    40

    Re: ISA Server 2004 Authentication

    i think its a side effect of this:
    if ISA Server is unable to authenticate the user for whatever reason, that means that no credentials at all are presented to the ISA Server, then any request from that user will be denied by the first rule requiring user authentication regardless of whether its an allow or deny rule

  7. #7
    browolf's Avatar
    Join Date
    Jun 2005
    Location
    Mars
    Posts
    1,527
    Thank Post
    107
    Thanked 89 Times in 75 Posts
    Blog Entries
    46
    Rep Power
    40

    Re: ISA Server 2004 Authentication

    my answer is that kerberos v5 in IE7 is incompatible with ISA2004. In order to stop all the anonymous connections you have to disable "Enabled Windows Integrated Authentication" but that option is omitted from group policy but i found an adm file here:

    http://www.pragmaticutopia.com/index...ask=view&id=90

    this thread details the issue more:
    http://forums.isaserver.org/Proxy_au...2033963/tm.htm

SHARE:
+ Post New Thread

Similar Threads

  1. ISA 2004 Publish Web Server Problem
    By Nij.UK in forum Windows
    Replies: 7
    Last Post: 30th November 2006, 09:48 AM
  2. ISA Server 2006/2004 User Reports?
    By Quackers in forum Wireless Networks
    Replies: 1
    Last Post: 20th November 2006, 09:50 AM
  3. ISA Server 2004 Service Pack 2
    By spc-rocket in forum Wireless Networks
    Replies: 1
    Last Post: 7th February 2006, 10:05 AM
  4. ISA Server 2004 and RADIUS
    By spc-rocket in forum Wireless Networks
    Replies: 0
    Last Post: 11th December 2005, 12:48 PM
  5. ISA Server 2004
    By krb548 in forum How do you do....it?
    Replies: 15
    Last Post: 25th July 2005, 12:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •