Integrated Windows Authentication authenticating the wrong user

teedilo_at_gmail.com
Date: 11/24/05

  • Next message: Yuan Ren[MSFT]: "Re: Website Problems" 
    Date: 23 Nov 2005 22:57:56 -0800

    I support an application that supports Integrated Windows
    Authentication. I am running into a strange problem with my own user
    account. It appears that Internet Explorer is passing the wrong
    credentials to the web server, because the application is trying to
    authenticate me with the wrong user account. The account is actually
    one of my accounts, but it's definitely not the one that I was signed
    into Windows with at the time that I was attempting to access the
    application.

    The application in question is Serena's TeamTrack. Serena says that
    TeamTrack authenticates with the user that the system passes to them,
    and as such, they maintain that it's not an issue with TeamTrack. I'm
    thinking that they may be correct about this.

    I've tried many different things to fix this:

    - I rebooted the TeamTrack server.

    - I rebooted my desktop.

    - I cleared my browser cache (deleted temporary Internet files,
    cookies, etc.).

    - I deleted from my desktop the profile of the user account that is
    being erroneously authenticated.

    Here are a few other interesting details:

    - We also have other TeamTrack systems within our network, and I am
    able to get signed in automatically to those systems just fine from my
    own desktop.

    - After logging into a different desktop with the account that I
    usually use to sign into my own desktop, I was then able to get signed
    in automatically to the TeamTrack system that I am having trouble
    signing into from my own desktop.

    This all leads me to believe that it somehow involves the connection
    between my own desktop and the TeamTrack server. I have read where
    Integrated Windows Authentication sometimes doesn't work properly with
    some proxy servers and Internet devices. I wouldn't think that it
    would have anything to do with our proxy server, since our TeamTrack
    systems have DNS entries that match one of the proxy bypass settings,
    so I shouldn't be hitting the proxy server.

    This is strange because we have been using TeamTrack for several years
    and this is the first I've seen this problem. I've had a few different
    desktops through the years, but I was even able to access TeamTrack
    successfully with my latest desktop for quite some time before running
    into this problem.

    My latest desktop is running Windows XP Pro. An upgrade to XP SP2 was
    fairly recent, but I had no problems for some time after the upgrade.
    I do use a tool called Psynch for maintaining the same password for
    both of my Windows user accounts, and that was changed fairly recently.
     I think I might next try disassociating my user accounts from Psynch
    and just change my passwords again "normally", just in case Psynch is
    somehow a culprit here.

    Theories, anyone? Thanks.

  • Next message: Yuan Ren[MSFT]: "Re: Website Problems"

    Relevant Pages

    • Re: Login failed for ServerGuest
      ... | guest and the use of the same account/password does not ... |>I think it is not a limitation in Windows 2000. ... |>use same password for Administrator account on both Win2000 and WinXP ... although Windows Authentication is more secure than ...
      (microsoft.public.sqlserver.connect)
    • Re: User authentication
      ... With Windows authentication, ... an account is a member of Domain Admins. ... Windows account instead to run backup jobs. ...
      (microsoft.public.sqlserver.clients)
    • Re: User authentication
      ... Server Agent service account. ... What I want to do is configure scheduled backup. ... However, if possible, I would like to use Windows authentication as opposed ...
      (microsoft.public.sqlserver.clients)
    • RE: Integrated Authentication (Kerberos) Problem
      ... Verify the SPN for the SQL service account is registered such as the ... >Thread-Topic: Integrated Authentication Problem ... A Windows XP SP1 with IE6 client machine ...
      (microsoft.public.inetserver.iis.security)
    • RE: Adding a virtual FTP folder to IIS
      ... I think we can follow the Form Authentication modal. ... application will use the ASPNET account. ... If we change the username ... Windows identity different from that of the default process identity. ...
      (microsoft.public.dotnet.framework)