Web Page access over Trust Relationship/VPN
dtaylforth_at_bmcl.com.au
Date: 07/15/04
- Next message: Jeff Cochran: "Re: IIS"
- Previous message: Bart: "passing NTLM authentication to another virtual site on same IIS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 14 Jul 2004 19:14:37 -0700
Environment Overview
The Domain is a mixed environment with predominantly NT4
DC's, some Windows 2000 member servers and a Windows 2003
PDC. There are two Domains Australia (BMCL) and New
Caledonia (NEWCALEDONIA), which is a Windows 2000 Domain
running in mixed mode. There are ISA Firewalls installed
in both environments, we are utilising ISA Permanent
VPN's to provide connectivity between the Domains.
The NEWCALEDONIA Domain is using DNS for name resolution
and there is no WINS, the DNS zone is newcaledonia.local.
The BMCL Domain is using WINS and DNS for name
resolution, the DNS zone is bmcl.local. The PDC in each
Domain has a secondary copy of the alternative DNS zone.
A Domain Trust has been established between the BMCL and
NEWCALEDONIA Domains and largely appears to be
functioning correctly however a couple of issues have
been noted.
Issue
When trying to connect to "Intranet" with Internet
Explorer from clients on the NEWCALEDONIA Domain the
following error is presented.
403 Forbidden - The ISA Server denies the specified
Uniform Resource Locator (URL) (12202) Internet Security
and Acceleration Server.
If I ping "Intranet" from the client it resolves as I
would expect to intranet.bmcl.local with the correct IP
address. If the FQDN is entered into the browser then
connection will be established, but I am prompted for
user credentials, if the logged on user credentials are
entered the web pages are displayed correctly.
We would like the clients to be able to connect
to "Intranet" without having to use the FQDN and without
the need to re-enter the logged on users credentials.
- Next message: Jeff Cochran: "Re: IIS"
- Previous message: Bart: "passing NTLM authentication to another virtual site on same IIS"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|