Re: NTLM strange problem - some MACHINES can't authenticate
From: Stephen (suess@mac.com)
Date: 01/31/03
- Next message: Curtis Anderson: "Re: Bringing new NT4 installation up to snuff"
- Previous message: John Brock: "Re: Bringing new NT4 installation up to snuff"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: suess@mac.com (Stephen) Date: 31 Jan 2003 12:18:14 -0800
First, let me say thanks for replying.
No, the registry hasn't changed, and moving the site to a different
webserver in our network produces the exact same results. Also, the
machines that can't connect are indeed up to date (win 2000 with all
patches) and machines with the seemingly exact same configuration
connect just fine. They all have the same IP range served up by our
dhcp server. The webserver is IIS5 on win 2000.
I'm stumped.
Peter Gervais <nospam@insitetng.com> wrote in message news:<Xns9312976AB6A64pgitng@216.221.81.119>...
> I'm inclined to suggest checking that the suspect machines are patched
> accordingly (OS and Browser). NTLM does require HTTP Keep-Alive
> (persistant connections) to negotiate the session. A packet-trace (sniff)
> would verify that the Keep-Alives are working.
>
> There are also a number of Registry settings for tuning (hardening)
> LM/NTLM authentication. Is it possible that the server's have been
> hardened and are therefore no longer compatible with old and non-updated
> software?
>
> Regards,
> Peter
>
> suess@mac.com (Stephen) wrote in
> news:e864bd05.0301290909.38fac56b@posting.google.com:
>
> > Yes, all normal traffic to the web server NOT using NTLM works fine.
> >
> > "Steve Klise" <sklise@pacbell.net> wrote in message
> > news:<0CGZ9.447$6W6.53872867@newssvr21.news.prodigy.com>...
> >> Does the machines that cant access the website, are you blocking any
> >> ports? Can you ping the website name?
> >> "Stephen" <suess@mac.com> wrote in message
> >> news:e864bd05.0301280924.28ce3c35@posting.google.com...
> >> > I have a problem that is driving me crazy and i hope someone can
> >> > help. I have set up a web server that has some pages using ntlm
> >> > authentication. Some machines on our company network can't login,
> >> > no matter the user. They can access the web server just fine and
> >> > any pages not requiring ntlm authentication. The weird thing is,
> >> > this has nothing to do with any particular USER, it is certain
> >> > MACHINES which can't authenticate. The same users can authenticate
> >> > from other machines on the same network.
> >> >
> >> > The web server is II5 running on win2000 pro. The clients are
> >> > either win 98 or win 2000 (some of each can login and some can't)
> >> >
> >> > does this sound familiar to anyone? Thanks in advance for any help.
> >
- Next message: Curtis Anderson: "Re: Bringing new NT4 installation up to snuff"
- Previous message: John Brock: "Re: Bringing new NT4 installation up to snuff"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|