Lan manager authentication website

I have a website that from the packet captures uses lan manager authentication. I can't seem to get this to work through the proxy. If I make a filter exception to allow TCP/1609 from the workstation and add the website to (bypass proxy list) I'll get the login dialog. Can I get some suggestions on how to make this work without changing my ie proxy settings?
http://portal.odh.ohio.gov/
and then click on the Login link. that takes you to:
http://mossapps.odh.ohio.gov/default.aspx

In article <[email protected]>, Keith Larson
wrote:
> unloading ipflt doesn't change the behavior at ALL. if i create a
> filter exception to all the workstation to communicate directly with
> the website (i block non-proxy port 80 traffic normally) and change
> ie to not use proxy for that website, it works just fine.
>
OK, this is a typical 'proxy bypass' scenario then. Typically you
allow port 80 (or 443) either from a fixed IP address (allow a server
to bypass proxy) or to a fixed destination IP address (allow hosts to
bypass proxy).
The easy part is setting up the filter exception to allow the traffic.
The tricky part is telling the browsers not to use a proxy for the URL
or IP address involved. You have to do that for every browser in the
bypass proxy menu of the browser. For IE, you can push that out via a
group policy. You could also use a proxy.pac file.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Similar Messages

Authentication on local SQL Server 2008 R2 Express server fails after Lan Manager authentication level changed to "Send NTLMv2 response only\refuse LM & NTLM"

I'm upgrading my organisation's Active Directory environment and I've created a replica of our environment in a test lab.
One medium-priority application uses a SQL server express installation on the same server that the application itself sits on.
The application itself recently broke after I changed the following setting in group policy:
"Send LM & NTLM - use NTLMv2 session security if negotiated"
to
"Send NTLMv2 response only\refuse LM & NTLM"
The main intent was to determine which applications will break if any - I was very surprised when troubleshooting this particular application to find that the issue was actually with SQL Server express itself.
The errors I get are as follows (note that there are hundreds of them, all the same two):
Log Name:      Application
Source:        MSSQL$SQLEXPRESS
Date:          1/19/2015 2:53:28 PM
Event ID:      18452
Task Category: Logon
Level:         Information
Keywords:      Classic,Audit Failure
User:          N/A
Computer:      APP1.test.dev
Description:
Login failed. The login is from an untrusted domain and cannot be used with Windows authentication. [CLIENT: 127.0.0.1]
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="MSSQL$SQLEXPRESS" />
     <EventID Qualifiers="49152">18452</EventID>
     <Level>0</Level>
     <Task>4</Task>
     <Keywords>0x90000000000000</Keywords>
     <TimeCreated SystemTime="2015-01-19T22:53:28.000000000Z" />
     <EventRecordID>37088</EventRecordID>
     <Channel>Application</Channel>
     <Computer>APP1.test.dev</Computer>
     <Security />
   </System>
   <EventData>
     <Data> [CLIENT: 127.0.0.1]</Data>
     <Binary>144800000E00000017000000570053004C004400430054004D00540052004D0053005C00530051004C0045005800500052004500530053000000070000006D00610073007400650072000000</Binary>
   </EventData>
</Event>
Log Name:      Application
Source:        MSSQL$SQLEXPRESS
Date:          1/19/2015 2:53:29 PM
Event ID:      17806
Task Category: Logon
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      APP1.test.dev
Description:
SSPI handshake failed with error code 0x8009030c, state 14 while establishing a connection with integrated security; the connection has been closed. Reason: AcceptSecurityContext failed. The Windows error code indicates the cause of failure. [CLIENT:
127.0.0.1].
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
   <System>
     <Provider Name="MSSQL$SQLEXPRESS" />
     <EventID Qualifiers="49152">17806</EventID>
     <Level>2</Level>
     <Task>4</Task>
     <Keywords>0x80000000000000</Keywords>
     <TimeCreated SystemTime="2015-01-19T22:53:29.000000000Z" />
     <EventRecordID>37089</EventRecordID>
     <Channel>Application</Channel>
     <Computer>APP1.test.dev</Computer>
     <Security />
   </System>
   <EventData>
     <Data>8009030c</Data>
     <Data>14</Data>
     <Data>AcceptSecurityContext failed. The Windows error code indicates the cause of failure.</Data>
     <Data> [CLIENT: 127.0.0.1]</Data>
     <Binary>8E4500001400000017000000570053004C004400430054004D00540052004D0053005C00530051004C004500580050005200450053005300000000000000</Binary>
   </EventData>
</Event>
All of the documentation that I have followed suggests that the errors are caused by incorrect SPN configuration- I figured that they were never correct and it has always failed over to NTLM in the test environment (I can't look at production - we couldn't
replicate the setup due to special hardware and also RAM considerations), but only NTLMv2 has issues.
So I spent some time troubleshooting this. We have a 2003 forest/domain functional level, so our service accounts can't automatically register the SPN. I delegated the write/read service principle name ACEs in Active Directory. SQL Server
confirms that it is able to register the SPN.
So next I researched more into what is needed for Kerberos to work, and it seems that Kerberos is not used when authenticating with a resource on the same computer:
http://msdn.microsoft.com/en-us/library/ms191153.aspx
In any scenario that the correct username is supplied, "Local connections use NTLM, remote connections use Kerberos". So the above errors are not Kerberos (since it is a local connection it will use NTLM). It makes sense I guess - since
it worked in the past when LM/NTLM were allowed, I don't see how changing the Lan Manager settings would affect Kerberos.
So I guess my question is:
What can I do to fix this? It looks like the SQL server is misconfigured for NTLMv2 (I really doubt it's a problem with the protocol itself...). I have reset the SQL service or the server a number of times. Also - all of my other SQL applications
in the environment work. This specific case where the application is authenticating to a local SQL installation is where I get the failure - works with LAN Manager authentication set to "Send LM & NTLM - use NTLMv2 session security if negotiated",
but not "Send NTLMv2 response only\refuse LM & NTLM".
Note also - this behaviour is identical whether I set the Lan Manager authentication level at the domain or domain controller level in Active Directory - I did initially figure I had set up some kind of mismatch where neither would agree on the authentication
protocol to use but this isn't the case.

Maybe your application doesn't support "Send NTLMv2 response only. Refuse LM & NTLM".
https://support.software.dell.com/zh-cn/foglight/kb/133971

Network security:LAN manager authentication level setting on GPO

Hi,
We have a requirement from project team to change the one of the security setting on default domain policy for all computers in domain. Below are the security setting which we need to modify.
computer configuration-->windows settings-->security settings-->local policies-->security options-->
Network security: LAN manager authentication level
this setting need to be changed to - Send LM & NTLM - use NTLMv2 session security if negotiated.
The project team facing issue with Apache web server and they found the solution on below link.(we have tested this by changing local group policy and this solution works as expected)
https://www.sysaid.com/Sysforums/posts/list/9065.page
We need to know what is the impact after enabling this on domain computers.
Need help on this to go-head on this.

Hi,
you have a weaker domain security overall. "
LM Hash Generation
The algorithm introduces several weaknesses that attackers can exploit. First, all lowercase characters are set to uppercase, reducing the number of possible characters. Second, it splits a long, strong, password into two seven-character chunks.
Both the LM and NTLM protocols operate essentially the same way; the only difference is the password hash.
REF: The Most Misunderstood Windows Security Setting of All Time
This post is provided AS IS with no warranties or guarantees, and confers no rights.
~~~
Questo post non fornisce garanzie e non conferisce diritti

I used to manage 3 websites using both my imac and macbook, using dropbox, however I can no longer access them from my mac book.

I have been managing 3 websites using iWeb for the last several years, using both my iMac and Macbook. However for the last two weeks, I can no longer access these sites from my macbook. It appears "empty". When I first started seeing this, I took it to the Genius Bar in another city and he moved some library contents to my desktop - still didin't help.
I know iWeb is a thing of the past, but I can't stop right now and learn something new for about the next 4 weeks (in a sports team in the middle of a season)
. After that, I will have time to learn a new product.
Also, what is a suggestion for replacing iWeb? Sandvox? Rapid Weaver?
Thanks!

What do you mean when you say you "can no longer access these sites?" Does that mean you can't connect to those sites in your web browser, or that they aren't showing up in iWeb?
If the latter, note that your iWeb data is all entirely stored in a hidden file. In the Finder, choose Go -> Go To Folder and paste the following path into the window that opens:
~/Library/Application Support/iWeb
In that folder, you will find a single file, called Domain. That's got all the data for all your iWeb sites. If that file is missing, or if it has become corrupt, you will need to restore it from an earlier backup.
As for replacing iWeb, either Sandvox or RapidWeaver should work. Which works best will depend on your own tastes. Note that neither is capable of fully importing iWeb sites, as those sites will have a lot of content that is copyrighted by Apple. For more information about transitioning to one of these products, see:
http://rapidweaverfaq.org/site/migrating_from_iWeb.html
http://www.karelia.com/sandvox/help/z/Transitioning_from_iWeb.html

Is it possible that a second person can manage the website on his own computer?

Is it possible that a second person can manage my website on his own computer?

Is the second person using a Mac? If so yes. All you need do is give them a copy of your domain.sites file that is located under your User/Library/Application Support/iWeb/domain.sites. They can make changes to the site and re-publish, but only if they have your server information etc for the place you are hosting.
If they are not using a Mac, then it is not really feasible to do this - iWeb produces too much code to be comfortably altered using an html editor, so unless that person is using a Mac too, then it is not really worth it. Either they need to have access to a Mac or you need to use another platform that can be accessed by a pc too.

Access Manager Authentication

Hi every1,
im using JES 2005Q4 on solaris 10 box.
i have created a web application which i deployed using the application server. i successfully secured few pages in my application using <security-constraints>. i used filerealm on the application server to authenticate.
how can i use access manager authentication in my application?
Im a newbee so plz help me out here.
Thanks in adv.
Mike

Is your AM log level set to message? If not, set to message and retest. You should get output in your debug logs.
On the agent side, set your logging to all:5

Concurrent Manager: Service Manager AUTHENTICATION

Hi hussein/helios
I navigate to System Administrator > Concurrent > Manager > Administer >
I checked :
Concurrent Manager: Service Manager AUTHENTICATION actual = 1; but target = 0; and Status = Target node/queue unavailable
How do I resolve this issue?
Thanks a lot
Ms K

Hi,
Please see these documents.
Note: 353031.1 - Why Does "Internal Concurrent Manager found node AUTHENTICATION to be down" Error Appear in Log?
Note: 342939.1 - What is the AUTHENTICATION Node and How is it Related to 'Could Not Contact Service Manager FNDSM_AUTHENTICATION_PROD' Message
Thanks,
Hussein

NT Lan Manager call from servlet

Can someone please point me in the right direction for some documentation, or even an example, of how to access the NT Lan Manager user information from a Java Servlet?
I am using iAS Java Edition.
Best regards
Christian Almgren

You can use
String s = response.encodeRedirectURL("http://www.sandeep.com/hello?sid=2222");
response.sendRedirect(s);
Or you could use the RequestDispatcher class
RequestDispatcher rd = this.getServletConfig().getServletContext().getNamedDispatcher("myservlet")
where myServlet is your registered name
rd.forward(request,response);
Hope this helps!!
Sandeep
null

Can anyone tell me where the links to "Manage Your Websites" moved to from the menu where I view my creative cloud files?

Does anyone have a link? I am used to going online to manage my websites, and make appropiate changes right in the browser with the service. Where did you go!!! Ohh No!!

Wow, I'm very sorry for posting that, HAHA, or even asking. After about 25 seconds, I realize you would just enter in the browser your web site address followed by /admin example www.mysite.com/admin Silly me... I love you Adobe :-)

How to configure management authentication on IAP using Tacacs Server?

Requirement:
Instant access points come with default username and password i.e admin/admin. This does not go long way, as the IAP start finding their place in campus and corporate networks.
With many administrators managing and monitoring the clustered IAP networks, TACACS or Active Directory based authentication is more useful.
Solution:
Keep this in view, IAP development teams have integrated TACACS and Radius based management authentication.
Configuration:
Follow the below steps to configure radius authentication in IAP:
Login to IAP web interface
Select "System" from the main menu and then click on "Admin" tab
Under local authentication, select as "Authentication Server"
Under the "Auth Server 1" Select "New Server"
Filling the name, IP address and shared key for Tacacs server and click OK.
Verification
Logout of the IAP web interface and try logging in using the username and password on TACACS server.

I was having troubles with this as well when a customer had an older Aruba Controller and 2 Access Points. We went with a couple IAP-205s and needed LDAP integration. Using the above configuration there were some additional items needed. I found that I needed the DISPLAY NAME of the admin for the Admin-DN. I had created a user with the first name Aruba and the last name LDAP. This made the DISPLAY NAME "Aruba LDAP". This is what needs to be in the CN= for the Admin-DN.I also found there is a difference in using the CN= and OU=Currently our admin account is in the Users group which is a “Container”. Our actual user accounts are stored in an Orginizational Unit with sub OUs as well. So the Admin-DN needed the CN=Users and the Base-DN needed the OU=MyUserOU.For the windows machines I had to download and install the Aruba GTC Shim because the customer was previously using GTC and they were not going to a RADIUS server at the moment. My Android phone and IPHONE did not need any additional addins for the authentication. The windows laptop I am using I needed to manually create a wireless profile with… Security Tab >“Choose a network authentication method:”Microsoft: Protected EAP (PEAP)Settings >Select “Trusted Root Certification Authorities”GeoTrust Global CASelect Authentication Method:EAP-Token (This is the Aruba GTC Shim) This allowed me to use my domain login credentialsUsernamePasswordDomain (This is blank because the Base-DN already has this, if anything is put in here the authentication fails)

Cisco LAN Management Solution is required to support Cisco Nexus 5548P and 5596UP switches?

Hi,
Could someone help to know what Cisco LAN Management Solution is required to support Cisco Nexus 5548P switches and Cisco Nexus 5596UP switches?
These new Cisco switches are being implementing on customer network and he ask us that he requires these equipments be supported on a LMS solution (customer currently is using LMS 3.2.1)
Can someone help?
Thanks in advanced,
guruiz

Some very limited Nexus support is present in LMS 3.2.1 - see the supported device table here.
To get more complete support, including the 5596UP, they need to upgrade to LMS 4.x (e.g. LMS 4.2.2 is the latest and is sold under the Cisco Prime Infrastructure 1.2 umbrella). The major upgrade from 3.x to 4.x requires purchasing an upgrade license.
Some functions (namely User Tracking ) will not be available on the 5k due to non-support of the requisite MIB on the device. I believe LMS still doesn't let you do VLAN management on 5k's - you need to use DCNM for that if you want to do it from a GUI.
See the table here for LMS 4.2 device support.

GnomeUI-WARNING While connecting to session manager:Authentication Rejected

Hi:
I was running Oracle eBusiness Suite R1211 on Enterprise Linux 5.3.
When I try to run HelloWorld on OA Framework tutorial I got the following error
(Gecko:6415): GnomeUI-WARNING **: While connecting to session manager: Authentication Rejected
Does any one has idea how to resolve the problem?
Please help
sem

Check the DBC file is updated one & are the connection is working or not.
Thanks
--Anil

Connecting to a PHP authenticated website in Java

Hi,
I have some free time this Summer so I wanted to play around with Java. I'm trying to write a program that will connect to a PHP authenticated website, use it's search and download stuff from the site.
My question is, what is the easiest way to authenticate? I saw that Java can do HTTP authentication, are there any classes in the library that will do this for me?
Thanks,
blanny

Ensure you have the database set up as an ODBC data source and the following should work.
Connection cconnection;
          try
               String URL = "jdbc:odbc:YouDatabaseName" ;
   String user = "UserName specified for this DB";
               String password = "PasswordYouSetForDB";
               Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
               connection = DriverManager.getConnection(URL, user, password);
   System.out.println("CONNECTED TO DATABASE");
          catch(SQLException sqlex)
               System.out.println(sqlex.toString());
          catch(ClassNotFoundException cnfex)
               System.out.println(cnfex.toString());
          }

Cannot manage my website due to firefox update

cannot manage my website (dotster hosted) due to my updated version of firefox. dotster says firefox was asked to fix the problem but hasn't. need to run firefox 4.0 or older but don't know how to have two firefox versions on my computer at once. how to download old version w/out messing up updated.

Thanks. I was unaware of a portable version. Seeing how it's still newer than a 4.0, I'm not sure if it would work or still have the same hiccups the updated full version has. There are verification issues and html vs. plain text issues between dotster and the latest Firefox versions. Dotster said it has to be 4.0 or older. If I find a secure site to download an old version, can download it without it affecting my current version? Can I have them both running without them affecting each other? I'm wondering why Firefox is not taking care of the problem (informed by dotster that they're still waiting on Firefox for a fix).

How do I manage my websites from my Azure trial?

A long time ago, I signed up for the azure trial that came with 10 free asp.net web sites (http://azure.microsoft.com/en-us/develop/net/aspnet/). I only tried it with a single site, but it worked well enough that I had eventually planned to use it for more.
In any case, up until this point, the site I put up has remained unchanged and I've had no need to manage it. The need has finally come up though but when I try to log in to the azure manager, it says I don't have a subscription. So I can't find any way to
manage the site or to potentially use any of the other 10 free site slots that I was under the impression I would get to keep and use later.
Can anyone offer any advice? I called Microsoft support, but they said they couldn't offer any assistance and told me to use this site http://azure.microsoft.com/en-us/support/options/. But when clicking get support I get sent to the page saying I don't
have any subscriptions, and the only phone number I find is the same one I already called.
I'm a little lost at this point and feel like even the site I did use during the trial is now in some sort of a limbo status where I don't seem to be able to do anything with it.

Hello elebet,
Can you please give me the name of the website that you have created in your trial period?
I would like to check if this website is still active.
Also since you have changed your account type to 'Pay as you go', I suggest that you contact support. Choose billing support when you open the ticket. Follow the link below:
http://azure.microsoft.com/en-in/support/options/
Thanks,
Syed Irfan Hussain

Lan manager authentication website

Similar Messages

Maybe you are looking for