NTLM is not working with EP 6 SP 9 on Windows 2003 with IIS 6.

Question

I installed EP 6 SP 9 on windiows 2003 server with IIS version 6.
Configures IisProxy.xml for redirection for filter irj. When  I make a call to default website, it in turn calls server with irj filter.
Portal page comes up and requesting me to enter user id password.
I made the changes mentioned by some of the web logs in this site.
I configured HeaderVariableLoginModule an and added as explined by Gregory Wolf on the following topic.
Integrated Windows Authentication with SAP EP 6.0 SP 3 and higher.
I see following log from Ep 6 SP 9 log file security.log from directory E:\usr\sap\DEV\JC00\j2ee\cluster\server0\log\system.
security#Plain###No user name provided.#
#1.5#000C2953326B00430000000100000A780003F358EF2132DE#1111988099323#/System/Security#sap.com/irj#com.sap.engine.services.security#Guest#18####200d0cb09f4b11d9926a000c2953326b#SAPEngine_Application_Thread[impl:3]_37##0#0#Info#1#com.sap.engine.services.security#Plain###Cannot log info about the logon attempt because the user name is null.#
#1.5#000C2953326B00440000000000000A780003F3591D22E168#1111988846027#/System/Security#sap.com/irj#com.sap.engine.services.security#Guest#18####dd1f09b19f4c11d98e98000c2953326b#SAPEngine_Application_Thread[impl:3]_7##0#0#Info#1#com.sap.engine.services.security#Plain###No user name provided.#
#1.5#000C2953326B00440000000100000A780003F3591D22E215#1111988846027#/System/Security#sap.com/irj#com.sap.engine.services.security#Guest#18####dd1f09b19f4c11d98e98000c2953326b#SAPEngine_Application_Thread[impl:3]_7##0#0#Info#1#com.sap.engine.services.security#Plain###Cannot log info about the logon attempt because the user name is null.#
#1.5#000C2953326B00450000000000000A780003F359227DE92E#1111988935662#/System/Security#sap.com/irj#com.sap.engine.services.security#Guest#18####128c40e09f4d11d9acb7000c2953326b#SAPEngine_Application_Thread[impl:3]_28##0#0#Info#1#com.sap.engine.services.security#Plain###No user name provided.#
#1.5#000C2953326B00450000000100000A780003F359227DEDC7#1111988935662#/System/Security#sap.com/irj#com.sap.engine.services.security#Guest#18####128c40e09f4d11d9acb7000c2953326b#SAPEngine_Application_Thread[impl:3]_28##0#0#Info#1#com.sap.engine.services.security#Plain###Cannot log info about the logon attempt because the user name is null.#
Lots of weblogs are pointing to remote_user value in IisProxy.log file. I am not able to see that.
I also tried switching IIS 6 to run as IIS 5 and did not help much at all.
Please help me on the issue.
I did not change authschemes.xml file.
My IisProxy.xml file looks as follows:
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE ISAPI-config[
     <!ELEMENT ISAPI-config ( filter, extension, ( mapping | config )* )>
     <!ATTLIST ISAPI-config
          version CDATA #REQUIRED
     >
     <!ELEMENT filter (log-path?)>
     <!ATTLIST filter
          name CDATA #IMPLIED
          log-level CDATA "3"
          log-flags CDATA "0x00000001"
          debug-flags CDATA "0x00008000"
          priority ( high | medium | low ) "high"
          extension-url CDATA "/scripts/IisProxy.dll"
          authentication ( skip | normal | forward ) "normal"
          remote-address ( skip | forward ) "skip"
     >
     <!ELEMENT extension (
          keystore-dir?,
          log-path?,
          data-path?,
          trace-path? )>
     <!ATTLIST extension
          name CDATA #IMPLIED
          log-level CDATA "1"
          log-flags CDATA "0"
          debug-flags CDATA "0"
          access ( filter | direct | both ) "filter"
     >
     <!ELEMENT keystore-dir (#PCDATA)>
     <!ELEMENT log-path (#PCDATA)>
     <!ELEMENT data-path (#PCDATA)>
     <!ELEMENT trace-path (#PCDATA)>
     <!ELEMENT mapping (
          source+,
          target,
          compress-types*,
          protocol-header?,
          certificate-header?,
          cert-chain-header?,
          cipher-header?,
          keysize-header?,
          keystore-path?,
          log-path?,
          data-path? )>
     <!ATTLIST mapping
          name CDATA #IMPLIED
          log-level CDATA "1"
          log-flags CDATA "0"
          debug-flags CDATA "0"
          keep-alive ( true | false ) "true"
          use-continue ( true | false ) "true"
          close-socket ( true | false ) "true"
          close-socket-delay CDATA "1000"
          thread-count CDATA "100"
          max-socket-age CDATA "37"
     >
     <!ELEMENT source (protocol, host?, port?, prefix, new-prefix?)>
     <!ATTLIST source
          access ( filter | direct | both ) "filter"
     >
     <!ELEMENT protocol (#PCDATA)>
     <!ELEMENT host (#PCDATA)>
     <!ELEMENT port (#PCDATA)>
     <!ELEMENT prefix (#PCDATA)>
     <!ELEMENT new-prefix (#PCDATA)>
     <!ELEMENT target (protocol, host, port)>
     <!ELEMENT compress-types (#PCDATA)>
     <!ATTLIST compress-types
          min-size CDATA "1024"
     >
     <!ELEMENT protocol-header (#PCDATA)>
     <!ELEMENT certificate-header (#PCDATA)>
     <!ELEMENT cert-chain-header (#PCDATA)>
     <!ELEMENT cipher-header (#PCDATA)>
     <!ELEMENT keysize-header (#PCDATA)>
     <!ELEMENT keystore-path (#PCDATA)>
     <!ELEMENT config ( source+ )>
]>
<ISAPI-config version="1.6">
     <filter name="IisProxy filter"/>
     <extension name="IisProxy extension" />
     <mapping name="IisProxy samples">
          <source>
               <protocol>http</protocol>
               <prefix>/irj</prefix>
          </source>
          <source>
               <protocol>http</protocol>
               <prefix>/Hello/</prefix>
          </source>
          <source>
               <protocol>http</protocol>
               <prefix>/Hello2/</prefix>
               <new-prefix>/Hello/</new-prefix>
          </source>
          <target>
               <protocol>http</protocol>
               <host>slcsepw04vd.pacificorp.us</host>
               <port>50000</port>
          </target>
          <compress-types>text/html, text/plain</compress-types>
     </mapping>
     <mapping name="Secure IisProxy samples">
          <source>
               <protocol>https</protocol>
               <prefix>/Hello/</prefix>
          </source>
          <target>
               <protocol>https</protocol>
               <host>localhost.your.corp</host>
               <port>8443</port>
          </target>
          <keystore-path>c:\sec\SAPSSLC.pse</keystore-path>
     </mapping>
     <config>
          <source>
               <protocol>http</protocol>
               <host>localhost</host>
               <prefix>/IisProxy</prefix>
          </source>
          <source>
               <protocol>https</protocol>
               <host>localhost</host>
               <prefix>/IisProxy</prefix>
          </source>
     </config>
</ISAPI-config>
Please help me. I am not sure what is missing. Please make a note that Portal version is EP 6 SP9 & Server is Windows 2003 with IIS 6.

Answer 1

I made the change as you requested and it did not help.
I do not see any remote_user entry in IisProxy.log file.
Please let me know the procedure to get REMOTE_USER into the IisProxy.log file.
<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE ISAPI-config[
     <!ELEMENT ISAPI-config ( filter, extension, ( mapping | config )* )>
     <!ATTLIST ISAPI-config
          version CDATA #REQUIRED
     >
     <!ELEMENT filter (log-path?)>
     <!ATTLIST filter
          name CDATA #IMPLIED
          log-level CDATA "3"
          log-flags CDATA "0x00000001"
          debug-flags CDATA "0x00008000"
          priority ( high | medium | low ) "high"
          extension-url CDATA "/scripts/IisProxy.dll"
          authentication ( skip | normal | forward ) "normal"
          remote-address ( skip | forward ) "skip"
     >
     <!ELEMENT extension (
          keystore-dir?,
          log-path?,
          data-path?,
          trace-path? )>
     <!ATTLIST extension
          name CDATA #IMPLIED
          log-level CDATA "1"
          log-flags CDATA "0"
          debug-flags CDATA "0"
          access ( filter | direct | both ) "filter"
     >
     <!ELEMENT keystore-dir (#PCDATA)>
     <!ELEMENT log-path (#PCDATA)>
     <!ELEMENT data-path (#PCDATA)>
     <!ELEMENT trace-path (#PCDATA)>
     <!ELEMENT mapping (
          source+,
          target,
          compress-types*,
          protocol-header?,
          certificate-header?,
          cert-chain-header?,
          cipher-header?,
          keysize-header?,
          keystore-path?,
          log-path?,
          data-path? )>
     <!ATTLIST mapping
          name CDATA #IMPLIED
          log-level CDATA "1"
          log-flags CDATA "0"
          debug-flags CDATA "0"
          keep-alive ( true | false ) "true"
          use-continue ( true | false ) "true"
          close-socket ( true | false ) "true"
          close-socket-delay CDATA "1000"
          thread-count CDATA "100"
          max-socket-age CDATA "37"
     >
     <!ELEMENT source (protocol, host?, port?, prefix, new-prefix?)>
     <!ATTLIST source
          access ( filter | direct | both ) "filter"
     >
     <!ELEMENT protocol (#PCDATA)>
     <!ELEMENT host (#PCDATA)>
     <!ELEMENT port (#PCDATA)>
     <!ELEMENT prefix (#PCDATA)>
     <!ELEMENT new-prefix (#PCDATA)>
     <!ELEMENT target (protocol, host, port)>
     <!ELEMENT compress-types (#PCDATA)>
     <!ATTLIST compress-types
          min-size CDATA "1024"
     >
     <!ELEMENT protocol-header (#PCDATA)>
     <!ELEMENT certificate-header (#PCDATA)>
     <!ELEMENT cert-chain-header (#PCDATA)>
     <!ELEMENT cipher-header (#PCDATA)>
     <!ELEMENT keysize-header (#PCDATA)>
     <!ELEMENT keystore-path (#PCDATA)>
     <!ELEMENT config ( source+ )>
]>
<ISAPI-config version="1.6">
     <filter name="IisProxy filter" authentication="forward"/>
     <extension name="IisProxy extension" />
     <mapping name="IisProxy samples">
          <source>
               <protocol>http</protocol>
               <prefix>/irj</prefix>
          </source>
          <source>
               <protocol>http</protocol>
               <prefix>/Hello/</prefix>
          </source>
          <source>
               <protocol>http</protocol>
               <prefix>/Hello2/</prefix>
               <new-prefix>/Hello/</new-prefix>
          </source>
          <target>
               <protocol>http</protocol>
               <host>slcsepw04vd.pacificorp.us</host>
               <port>50000</port>
          </target>
          <compress-types>text/html, text/plain</compress-types>
     </mapping>
     <mapping name="Secure IisProxy samples">
          <source>
               <protocol>https</protocol>
               <prefix>/Hello/</prefix>
          </source>
          <target>
               <protocol>https</protocol>
               <host>localhost.your.corp</host>
               <port>8443</port>
          </target>
          <keystore-path>c:secSAPSSLC.pse</keystore-path>
     </mapping>
     <config>
          <source>
               <protocol>http</protocol>
               <host>localhost</host>
               <prefix>/IisProxy</prefix>
          </source>
          <source>
               <protocol>https</protocol>
               <host>localhost</host>
               <prefix>/IisProxy</prefix>
          </source>
     </config>
</ISAPI-config>
Please let me know what is missing.
Thanks.