Client on internet MP

Hey huys, i have one primary site with mp and additional mp for internet clients. Everything works but one thing. Client on that internet mp is not visible in console- it show client = no. Tried to reinstall but nothing helps. Dont know what to do... Main
mp is communicating with intranet clients through http and internet mp only with internet clients on https. What can i o to make client on internet mp talk to main mp????
I can see this on main mp:
A client is trying to re-register with an administrator revoked certificate: SMSID=xxxxxxxxxxx
maybe it has something to do with certificates that are on internet mp for mp and dp???
To be clear its a client on mp- not a other internet client- a client installed on mp that is used as internet mp

"A client is trying to re-register with an administrator revoked certificate"
Based on that message, the client auth certificate is not valid on that system. Have you tried issuing a new client auth cert to that system?
Jason | http://blog.configmgrftw.com | @jasonsandys
i did that:
select
*fromclientkeydatawhereisrevoked='1'
Update
clientkeydatasetisrevoked=0 whereisrevoked=1
tthen
client finally started to work but now i got something else :(
SMSID '9bfce40d-be2f-4e04-810c-757aaa4c0855' is invalid.
ClientIDManagerStartup 2014-12-19 14:48:02
7032 (0x1B78)
all
other clients have GUID:xxxxxxx but this one has only xxxxxxxx

Similar Messages

Can lync client use internet proxy settings to proxy edge servers, if direct access is not reachable?

Hi everybody I am trying to Login with my lync Client out of my organization. So I am using lync as a remote user. I am in another organization, and I am using their coporate lan wired and wireless, but I cannot Login to lync in my organization.
I see that I cannot Access my edge Server on port 443 to authenticate directly, I know that Client in this organization use Internet Proxy to browse the Internet. they have a .pac in their ie Settings.
my question is; can lync Client use Internet Proxy Settings to reach the Destination? I mean the Access edge on port 443?
or it can use only Client direct Access to reach the edge Servers?
I Think that the answer is that I use tcp protocol and not http, and maybe that is the reason why I cannot use the Internet Explorer Proxy Settings to reach the Access edge Servers, different maybe is the case I Need to reach the reverse Proxy for live Meetings.
Hope my question is clear.
Thanks

Proxy settings are used to tell Internet Explorer the network address of an intermediary server (known as a proxy server) that is used between the browser and the Internet on some networks.
Lync client doesn’t use Internet Proxy Setting. You need to access the Edge service directly.
Lisa Zheng
TechNet Community Support

VM client hijacks internet from another VM

Hi,
I'm running 2008 R2 Enterprise, we have 3 VMs (2 server 2008 R2 and one Server 2003 R2) that are all running nicely. They can be seen on the network, can see the internet and can be accessed via the internet.
I'm trying to add two more servers to the same host, a 2008 Web Edition and a 2003 R2.
Individually each server works fine, but if both are running at the same time the 2003 R2 seems to hijack the internet connection from the 2008 Web edition.
If the 2008 Web server is running, then I start the 2003 server, after a period of time that seems to vary the web server looses it's connection and I can then connect to the 2003 server.
This is possibly being triggered when I try and access a website on the 2003 R2 server (MSCRM 3), I'm not totally sure of this yet.
The 2003 server is a copy of a VM that is already running on the host, but I get the same behavior running on a different host with only these two clients.
To get the 2008 server back on line I need to shutdown the 2003 server, then restart the 2008 server while the 2003 server is shut down. Eventually it comes back online. Disconnecting the 2003 server or pausing doesn't help, it needs to be shutdown!
Any ideas would be welcome.
Mark

Hi,
Please confirm the issue not cause by the IP conflict first and when you deploy a duplicated or imaged Windows installation, it is required that the System Preparation (Sysprep)
tool is used before the capture of the image. Sysprep prepares an installation of Microsoft Windows for duplication, auditing, and customer delivery. For Microsoft Windows 2000, Windows XP, and Windows Server 2003, Sysprep is included with the latest service
pack Deploy.cab.
The related KB:
The Microsoft policy for disk duplication of Windows installations
http://support.microsoft.com/kb/314828
NewSID v4.10 download
http://technet.microsoft.com/en-us/sysinternals/bb897418.aspx
Hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Client (an internet radio) will not automatically connect

Trying to install an internet radio Sagecom RM 50 on my intel mac lion with a time capsule. It will not connect automatically. I can connect using a pin and inputting the MAC, but when turning the radio off , it will not reconnect automatically. The radio works perfect on my office system with a thompson router and windows xp. Any ideas?

Sorry I haven't fully explained. First time I have joined a forum for assistance.
The Sagemcom RM50 is a wireless only internet radio and should connect automatically to your network after it scans for available networks and you input the encryption key. It works as advertised with my work router and windows xp system. I checked it at work for troubleshooting only to ensure that there was not a problem with the radio.
I want to use this at home, but it does not connect automatically with my TC and imac. It recognizes both my normal and guest networks. I am able to input the encryption key with no faults, but it just continues attempting to connect with no error codes. The only way I have been able to connect is by "add wireless client" manually from the airport utility. This is where there is an option to use a PIN. The PIN is generated from the radio itself. The radio MAC address is then found and the connection established with no further problems. (There is also an option for "connect on first attempt" but this does not work.) According to the airport utility documentation after you have added a wireless client, it should reconnect without a password.
The problem is that when you turn the radion off and back on the radio will not automatically reconnect.
We have 6 or 7 other wi-fi devises (both apple and non-apple) that have never given this sort of problem.
It appears that the TC or OS is not saving or recognizing the radio MAC address when you turn it on. It just continues attempting to connect. I'm pretty certain at this point there is something blocking the wireless connection attempt and that a setting needs to be revised to allow the radio to connect and an IP address provided.
Any assistance would be greatly appreciated.

Managing remote clients via internet.

The question have maybe been asked before.
I have been speaking to Apple Support Sweden and UK and they give me different answers so now i would like to ask all the users of Apple Remote Desktop if what i would like to achieve with buying this software actually would works.
I have Clients all over the world, all mac users, and they are never at one place longer than 24h. They have no higher computer skills then getting online to check mail and all the rest they need to be able to use to manage their work life.
Would i be able to use ARD for accessing my client computers without having to ask them to contact the computer admin at the hotel or where ever they might be at that time and place to sort their port´s out.
To be able to store the users details for future use and just ask the client to if needed a "whatsmyip.com" and that would be all i would need to access them much like Skype finds its way trough any possible firewall without VPN tunnels and things. Just that Skype would not really be as professional and functional as ARD
Thank you all in advance.
Best regards

ARD would be awkward to use with clients that are always roaming. You'd constantly be dealing with IP address and router/port issues, something especially problematical with hotels where firewalls often block the necessary ports (and hotel admins generally will not alter their firewalls to accommodate such use). I would instead suggest a service such as LogMeIn. These services generally work much better with clients on the move.
Regards.

Block clients from internet

Our school is running OSX on a G4 with about 21 computers and as teachers we share the network with different grade users. Is there a way we can block the internet from others users, the other grades are giving the password to the internet and it upsets the atmosphere of the room when the other teacher is teaching. We are using workgroup manager.
G4 Mac OS X (10.4)

WRT54GL (192.168.10.0/24, NAT, DHCP)==========LAN (192.168.1.0/24, gateway 192.168.1.1+other computers)...
If the WRT54GL is 192.168.10.x and your LAN is 192.168.1.1, then computer's connecting to the WRT54GL will not access the resources/computer's connected to the 192.168.1.1(LAN) Network as they are running different individual networks...

Can't Administer Remote ARD Clients Over Internet

I am attempting to use Apple Remote Desktop to administer a computer in my office remotely from my home. So far, I have been unable to access it remotely (everything works fine if I am within the same LAN as the target computer). As far as I can tell (from reviewing other posts in this forum), I have configured everything correctly to make this work, but still no luck. Here are some details about my setup...
The target network router has a dynamic public IP address assigned by my ISP, so I have set up a dynamic DNS host for it at DynDNS.com and installed their DNS updater software on the client computer to properly resolve the hostname to the current IP address of the router. I set up port forwarding on the target network router for ports 5900 and 3283 (both TCP and UDP) and directed those ports to the internal static IP address of the computer I am trying to administer. I have tested the ports using the DynDNS Open Port Tool and both ports return a result indicating they are open and accepting connections.
When I attempt to access the target computer through ARD from outside the LAN, I am entering the dynamic DNS hostname in the "Network Address" section of the Scanner and it will show up immediately in the computer list below with the correct public IP address listed for the network router. However, when I attempt to add the computer to a list so that I can begin administering it, I am unable to verify my username and password for that target computer and it results in the entry showing up in the list as "offline." As I mentioned before, I can access this computer without difficulty using the same username and password when I am located within the LAN, so it does not seem to be a problem with those.
It would appear that my queries to this target computer are not getting through even though I have forwarded the necessary ports in the router. Any thoughts?

You want to be careful about opening ports that don't need to be opened, I'm not any kind of expert, but if you only need tcp, don't open udp just incase. Close the udp.
I know, I just opened it up to test things out. I closed it again as soon as I determined that was not the solution.
What kind of firewall is on your router? Is it something that you edit like a text document or do you click an add button and type a port number... specify an ip for the port to be forwarded to or just a list of check boxes to open a port? Does it have or need you to tell it ip destinations for both directions? My firewall you have to tell it incoming traffic from external network on port x goes to ip xxx.xxx.xxx.xxx and outgoing traffic on port x from ip xxx.xxx.xxx.xxx goes to external network. I would guess you don't need to specify both directions on yours, but you might want to check.
The router is a Actiontec PK5000 DSL modem. It has a GUI for editing the firewall settings (not a text file). As far as I can tell, you only need to specify port forwarding exceptions for incoming traffic, not outgoing. There are some fields within the port forwarding section of the GUI which are identified as "optional" entries that I don't quite understand, but I don't think they deal with outgoing traffic. They are identified as "remote ports" and "remote IP". I have been asuming that you would enter something into these fields only if you wanted to allow the specified port forwarding exception if the incoming traffic was from a specific external IP address and/or port(s). There is a notation next to these fields that says if you leave the fields blank, it will apply to all IP addresses and ports.
Now that I think about it, I'm not sure that I have ever tried entering anything into the remote port fields to see if that makes a difference. Perhaps I should try that. For example, if I am specifying that I want to forward port 5900, maybe I should try entering port 5900 in this optional "remote port" section as well. It seems like I should probably still leave he remote IP field blank. I won't be able to give this a try until I get back to the office on Monday.
One other thing... the router interface has the section I have described above called "Advanced Port Forwarding" but it also has another section called "Applications" where it seems that they have identified a number of pre-defined port forwarding rules that apply to specific applications/games. I have looked in there and there doesn't seem to be a pre-defined entry for ARD (there is one for VNC that opens up port 5900 only). Each entry specifies the ports to be opened up and then there is a blank field where you can enter the target IP address to be forwarded to. It is also possible to create new user-defined application entries in this section, so I have previously created a new entry for ARD to see if I might get a different result, but the end-result was the same.
I have considered buying a new dedicated router like the Apple Airport Extreme instead of using the router functionality of the DSL modem, to see if it's a problem specific to the router. Do you think this might get me anywhere?

WSUS For Clients With No Internet Access

This is more of a functional question than an issue.
Right now I have WSUS set to 'Store update files locally' and it works great. With an ever expanding number and size of updates, I don't have space to keep storing the necessary updates on my WSUS server.
If I set WSUS to 'Do not store update files locally', will my clients without internet access still be able to get updates? Many of my devices are behind firewalls that do not permit access to the internet in any form. I'm trying to avoid adding
storage if at all possible.
Thanks,
Brian

Correct, if you set WSUS to 'do not store update files locally', then your clients without internet access will not be able to access Microsoft Update to download the files without you creating a firewall exception. Which sounds like an awkward way to do
it.
(1) Are you on top of your regular maintenance with WSUS, ie, declining superseded updates, running Server Cleanup Wizard in the recommended order?
(2) Are you confident that the classification of updates being downloaded is appropriate and nothing un-needed (e.g drivers/absent OS) are being downloaded? Have you chosen to download the space-hogging express installation files?
(1) and (2) would be generally better practise then 'do not store updates locally', but if bandwidth is cheap or irrelevant for you, then perhaps you might be tempted to not store updates locally. In your situation where you have a reason to deny clients
internet access, it would seem like a lot of paperwork, and technical expertise, to only allow them internet access for updates. (plus, I'm not sure it's possible, just presume it would be)
What are your numbers? (size of WSUSContent, WSUSDatabase, space on drives?)

Support for Internet based client Management - SCCM 2012

Hi There,
My Company wants to go for Internet based client Management in SCCM 2012 SP1 R2 and here is the design I'm proposing. I'm getting a bit confused at one point and need suggestion....
Everything would work on HTTPS ( PKI Certificate based )... LAN and Internet.
1 Primary ( with non-client facing roles installed ) on LAN with two site systems.
- One Site System configured for INTRANET support only with MP, DP and SUP -> To support LAN users ( Allow
Intranet-only connections )
- One Site System configured for INTERNET support only with MP, DP and SUP -> To support Internet users ( Allow
Internet-only connections )
The INTERNET facing site system is in DMZ network connected to parent Primary via Firewall.
We want internet clients to talk to ONLY DMZ SCCM Site System and no connection to corporate LAN. We cannot open any ports for internet based clients to LAN.
If this is the supported scenario, then why we need to put the Internet FQDN in the Primary server Site System property. This server would not be available to internet. It should only be my DMZ SCCM server client should connect for MP, DP and SUP and only
this DMZ server should be accessible to client over internet.
Also, what least ports should be opened between :
- Parent Primary and its internet facing site system kept in DMZ
- DMZ Site system and internet clients.
Thanks in advance for your suggestions.
Sam

The FQDN has only to be specified on the Internet facing site system. You can leave this field blank on the primary site Server.
Ports to Open:
Internet --> DMZ Site Server:
TCP Port 443
TCP Port 80, if Fallback Status Point is installed
DMZ Site Server --> Primary Site:
TCP 135, 49152-65535
TCP 445
TCP 135, 24158 (fixed with
http://msdn.microsoft.com/en-us/library/bb219447(v=vs.85).aspx )
TCP 80, 443
If you have some other roles installed, please consult this page:
http://technet.microsoft.com/en-us/library/hh427328.aspx
Cheers,
Thomas Kurth
Netree AG, System Engineer
Blog:
http://netecm.netree.ch/blog | Twitter:
| LinkedIn:
| Xing:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

How to enable for Internet-Based Client Management existing "intranet" clients

Hello,
Step #1
I have an existing "intranet-only" SCCM 2012 SP1 CU1 environment. It is made of HTTP Intranet-Only MP.
All clients are properly communicated with one of the intranet MP
All clients are leveraging auto-enrollment of our AD PKI and have a working client certificate recognized by SCCM client
Step #2
I expanded the above infrastructure to support IBCM clients. Basically I want the existing intranet clients still be managed when they are outside our network
I added MP, DP, SUP, FSP on dedicated DMZ servers. It has been published on Internet, and properly declared with public DNS
The DMZ MP has been configured for HTTPS / Internet client only
When I tested first this setup in my lab, it was working fine, and my "intranet" client moving to Internet was properly detecting this configuration, and was starting to contact the "DMZ/Internet MP" without any problem
I did the same on my production environment but this time, my client moving to "internet" detectes it is connected on Internet but does not have any clue about the DMZ/Internet MP to contact. According to logfile, it is trying to check on DNS,
WINS, etc. but obviously it is already too late when in Internet, this information is no longer available.
I guess I did something in my lab environment to make it work but I don't what. Any idea how to tell to existing clients they should use a new "Internet-Only" MP when they are on Internet ?
Regards.

Basically I found my problem...
In my lab, I manually configured the SCCM client option Internet-based management point (FQDN) to use the public DNS address of my Internet/DMZ MP.
If I do the same for my production sample client, it works fine now.
Question: how can I enforce this change on all my existing clients ?

Internet Based Clients via F5 Big-IP load balancer

Hi Guys,
Please help with below question....
We have the requirement to support internet based clients...we have a proper MS PKI infra in-place. The SCCM design is like this : Primary Server is on corporate LAN and I have attached a site system server which is in DMZ network ( Say ABC Zone ). Now as
per my knowledge DMZ SCCM Site System server should be accessible to clients over internet connection and to make this happen, FQDN of site systems that support Internet-based client management must be registered as host entries on public DNS servers.
Now the twist is... as per our company policy we cannot make that SCCM Site system server directly available on internet... Network team is saying there is another DMZ zone ( Say PQR Zone ) where they have F5 Big-IP load balancer which are internet facing
( HTTPS ). Now they are saying that our SCCM clients should hit those devices and then internally re-direct to our SCCM site system server kept in ABC Zone.
VeriSign certificates will be used to encrypt in-coming network traffic to the F5 Big-IP Load Balancers configured as ADFS reverse proxy servers residing in the PQR Zone.
Is this scenario supported ? Please let me know what alternates we can have to avoid our SCCM server not directly facing to internet.
Thanks,
Sam

Hi Jason,
Thanks for your quick and prompt reply as always. My answers in BOLD...
First a question, you said "we have a proper MS PKI infra in-place". Does this mean you have a CDP exposed to the Internet or is an OCSP responder Internet accessible? If not, you will have issues although this can be overcome by disabling CRL checking
on the clients, that does lower your security posture. With "Proper PKI infra" I meant... they have if available already and supporting SCCM 2007 environment with it...but not supporting internet based clients in SCCM 2007. They implemented PKI there
just for better security. At present PKI CRL server is on internal network and the assumption is that, machines will also VPN-in the corporate network for CRL and certificate renewal when required...at some point in time.
To your real question here, is the F5 bridging or can it be set to pass-through? Pass-through is generally easier. Ultimately though, ConfigMgr doesn't care as long as the traffic gets to the site system hosting the roles. The main difference will be with the
certificates used by each component. With bridging, the F5 will terminate the SSL traffic and then initiate a new SSL stream to the site system.
This is all pretty transparent to ConfigMgr and the client as long as the certs used are configured with the proper SANs and the F5 properly passes the traffic along.
I don't think Network team would allow 'pass-through' and would go for 'bridging' option. Can you please let me know the steps I need to follow to configure bridging in-between F5 Balancers and SCCM site system server...bottom line is...our SCCM clients
should be able to communicate to our site server to get the MP, SUP and DP service. I'm not clear with the statement I underlined in above para.
Is using a third-party product like an F5 supported by Microsoft. No not explicitly. They rarely support anyone else's technology. Is the scenario in general supported? Yes, however Microsoft only provides guidance for doing so in conjunction with TMG/ISA.
If you search the web for "internet based client management bridge" you'll get lots of hits. Most (if not all) will be for ConfigMgr 2007 but they are still applicable.
Not able to find much fruitful data... Can you please provide me with good links which would help me clear this technically.
Now, if your F5 is set to pass-through, then there's not much extra to do at all assuming the traffic is routed properly
THANKS AGAIN for your help in this regard.
Sam

Internet based client activity

I am setting up clients for internet based client management. We were already have PKI certs for all of our clients. The client shows the connection type as currently internet, but the client activity shows inactive in the console. Where
would I start to trouble shoot this?

The client indeed needs to have the information the Internet-based Management Point information. Normally the client should get that information as a policy when it's correctly communicating with a Management Point, or as a property during the client installation.
Also, indirect it's at least one of the things that counts with the InternetEnabled property.
My Blog: http://www.petervanderwoude.nl/
Follow me on twitter: pvanderwoude

Podcast Producer and Internet Explorer

I've configured Podcast Producer on 10.6.8, and it is working fine - items are processed from the Capture software through to PcP2 and Xgrid, and are then uploaded to a Wiki.
The issue is with clients using Internet Explorer (any version) and their ability to play audio files uploaded from Capture or through the web interface of the wiki. Videos work fine, but whatever code is used to upload just audio files to the wiki cannot be interpreted by IE. I know that 10.6.8 was meant to address some of these issues, but I am just not sure how to proceed.
Has anyone had a similar experience?
Cheers
Kieran

Not sure if this will fix your problem, but I was having the same problem until I looked at the specs for XGrid, it has to run on an Intel Mac. This is where you can get the specs:
http://docs.info.apple.com/article.html?artnum=306737
Here is what is in the doc:
Podcast Capture requirements
Any Mac running Mac OS X 10.5 Leopard
iSight camera (built-in or external) or FireWire DV camcorder
Podcast Producer Server requirements
Any Mac running Mac OS X Server version 10.5 Leopard
Xsan for optional cluster file services
Podcast Producer Xgrid rendering requirements
Any Intel-based Macintosh Server or Intel-based desktop Mac (a Mac Pro, for example)
Mac OS X 10.5 Leopard or Mac OS X Server version 10.5 Leopard
At least 1 GB of memory (RAM) plus 512 MB of additional RAM per processor core
At least 50 GB of available disk space
Xsan for optional cluster file services
Quartz Extreme-enabled video chipset
Note: Quartz Extreme support can be verified in the Graphics section of Apple System Profiler.
Note: If a system is providing multiple Podcast services (for example, Podcast Producer and Podcast Producer Xgrid rendering), the system needs to meet both requirements.

No internet access after disconnecting from VPN

Summary:
windows fails to restore normal network after disconnecting from a VPN network, the PPP adapter which represent VPN connection stays in the interface list even after disconnection. system has no network access to anywhere.
Synopsis:
a. Win 7 Pro x64 Client computer in a home network without any corporate firewall software connects successfully to VPN using windows VPN connection. (Rasdial)
b. after disconnecting from VPN, client lost internet and local connections.
c. ipconfig -all shows PPP adapter (VPN) still exits as an network interface in nonoperational state.
d. pinging any ip address except localhost results in "no resources" error.
e. trying to dial VPN again results in "element not found" error.
Solutions I tried so far:
ipconfig -release and ipconfig -renew.
Disable / Enable Wireless Adapter.
rasdial "vpn connection" /d
currently the only solution is restarting the PC after each VPN usage which is very frustrating.

Hi Ivan and thanks for your reply,
I tried "netsh winsock reset", unfortunately it didn't fix the problem.
The status Icon is normal, no indication of limited or no connectivity, I can ping and open the router webpage at 192.168.1.1.
here is the result of ip config command, hope it helps, if you want I can provide netstat result or any other net diag command you want.
as you can see the PPP adapter still in the list which it shouldn't be.
C:\Windows\system32>ipconfig -all
Windows IP Configuration
Host Name . . . . . . . . . . . . : PC11
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : ASUS 802.11n Wireless LAN Card
Physical Address. . . . . . . . . :
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::e5f6:2dba:87d2:24bd%23(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.3(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : Tuesday, June 19, 2012 10:11:44 PM
Lease Expires . . . . . . . . . . : Wednesday, June 20, 2012 10:12:10 PM
Default Gateway . . . . . . . . . : 192.168.1.1
DHCP Server . . . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 393245116
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-16-6B-9B-DF-E0-CB-4E-BD-BA-97
DNS Servers . . . . . . . . . . . : 192.168.1.1
NetBIOS over Tcpip. . . . . . . . : Enabled
PPP adapter :
Media State . . . . . . . . . . . : Media unoperational
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Office
Physical Address. . . . . . . . . :
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Autoconfiguration IPv4 Address. . : 169.254.0.32(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.0.0
Default Gateway . . . . . . . . . : 0.0.0.0
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{5990D2D5-1838-4CFD-911A-10108283C856}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter isatap.{56840267-98F4-49BF-A6EE-85724D65C35E}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter #3
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Empty request when using IE5.5 and client auth.

We are in the process of enabling Client Authentication for one of our websites. When enabling client authentication in iPlanet 6.1SP2 somethings go wrong when using the client uses Internet Explorer 5.0 or 5.5.
It seems that when using a IE browser older than 6.0 the Content Type is being sent twice:
Contect type: application/x-www-form-urlencode, application/x-www-form-urlencode and the servlet that needs to capture the data which is sent by the Client replies with a Cannot process an empty request.Does anyone have a workaround for this??

I hadn't heard of this problem before, but it should be possible to work around it by adding the following lines to obj.conf:
<Client headers="Content-type: application/x-www-form-urlencode, application/x-www-form-urlencode">
AuthTrans fn="set-variable" set-headers="Content-type: application/x-www-form-urlencode"
</Client>Of course, you could also a) modify the affected Servlet or b) write a Servlet Filter that would modify the header before it's passed to the affected Servlet.
Please let us know whether you're able to solve the problem

Client on internet MP

Similar Messages

Maybe you are looking for