Microsoft ISA ReverseProxy and EP 7.0

Hello,
       We are trying to POC the ISA's reverse proxy functionality with EP 7.0. We are following the document jointly published by SAP and Microsoft - https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/docs/library/uuid/3da439fd-0701-0010-1dad-9b2a071799cb
I am wondering if any one else tried this before?  I would appreciate if you can share your experiences.
Here is our high-level setup:
Currently we are testing without HTTPS or any fancy things, just plain functionality. Both ISA server and EP 7 portal are connected to same LDAP store. We have configured the ISA server with reverse proxy (web publishing) with authentication type BASIC.   User types the ISA reverse proxy URL like http://test.xyz.com/irj, an ISA's default HTML authentication form is displayed. After entering the userid/password, he/she will be authenticated to the LDAP and if successful, passed to actual portal URL like http:/ep70.xyz.com:50000/irj.
Portal authentication fails.  This may be because my portal configuration is wrong. Here are my questions?
I have configured EP 7.0 login module stack with HeaderVariableLoginModule, since we are using the ISA’s BASIC authentication, do I need this module?
If yes, what is the value I should enter for ‘Header’ variable in the login stack?
What exactly need to be configured in the Portal for this to work?
Pleas answer only if you know and understand my questions. I will award points to the person that helps me.
Thanks
Steve
[email protected]

Hello, Hello,
       Any one out there that can chime-in on this.
Thanks
Steve

Similar Messages

  • Microsoft ISA and MARS

    Hello! Is there any manual how to setup Microsoft ISA and MARS in order to view a full ISA logs..I try with SNARE for isa....and i can not view nated connections on ISA in MARS......

    We have one but It's not talking to MARS at present. My guess is that you would want the logs in the W3C format and that you'd have to write your own parser for it.
    I've never used SNARE so I can't comment on how it would help in this situation. Their web page says it's for event log data and I'm unsure if txt files written in a directory count as this type of data.

  • ASA 8.0 and Microsoft ISA (local user backup)

    What is the command so that when the username + password cannot be found in the microsoft isa server, the pix will look at the local database?
    This command works in the router, but I cannot seem to find the equivlant for the pix.
    aaa authentication login default local group tacacs+
    Basically does the pix asa 8.0 support Multiple authorization commands?
    Thank you very much for your help.

    On a router, "aaa authentication login default local group tacacs+ " will ALWAYS use the local user DB, never tacacs.
    "aaa authentication login default group tacacs+ local" will first try tacacs and only if the tacacs server is not responding, use the local DB. Note that if the tacacs DOES respond but rejects the authentication attempt (user does not exist or wrong password), that the router will NOT use the local DB.
    That said, on pix/asa you can do the same, e.g.:
    aaa-server TPLUS protocol tacacs+
    aaa-server TPLUS (management) host 10.0.0.1
    aaa authentication telnet console TPLUS LOCAL
    hth
    H

  • Customers not able to log in with Microsoft ISA server firewall.

    I have a few external customers that are having issues logging in.  In all cases it is with the customer having Microsoft ISA firewalls.
    They can get to the site.  They put in their username and password.  The screen flashes back to the logon screen, no errors, just back to the screen.
    On the logs I seen the logon page request and the 200 OK but, the username and password never come across.
    I can not tell if the username and password are being blocked by the ISA server or when the logon screen is presented that the username and password fields are just not active.
    Has anyone else see or hear about this one?

    We are seeing a slightly different problem but certainly related. We are using a SAP cFolder server for PLM collaboration. Companies using a Microsoft ISA server are not seeing problems logging in but are seeing problems with the mass download feature. They are seeing the connection hang. Looking at the ISA log file on the server they are receiving an authentication problem and a broken connection. If you try a single file download everything works OK. Also vendors without ISA are working fine.
    What is it about ISA that would be causing issues like these?

  • Perimeter authentication with ISA server and AD

    Hi,
    We have a Microsoft ISA server that does all authentication at the perimeter. I'm trying to set up a WLS 10 that can inspect and pass on the authenticated Subject to the (SQLServer) database when performing searches.
    I have configured the environment according to the steps in [url  http://e-docs.bea.com/wls/docs100/secmanage/sso.html], and I have set up my security realm with an Active Directory Authentication provider and a Negotiate Identity Assertion provider. But soemthing is obviously not working, since I see no signs of the authenitcated subject in the server log, and Security.getCurrentSubject() returns an empty Subject. What am I doing wrong?
    Thanks
    Edited by tdirrenb at 04/18/2008 6:33 AM
    Edited by tdirrenb at 04/18/2008 6:34 AM

    Hi Vinod,
    Looks like this is a AAA issue. Moving this to AAA domain for faster response.
    thanks,
    Vinay

  • Safari crashes behind Microsoft ISA proxy \ Authenticating to MS services

    I recently updated to Leopard but I'm experiencing multiple issues with Safari. Whenever I'm at the office Safari crashes repetitively whenever I try to access a site requiring authentication (mainly Microsoft based). at the office .
    This issue started after upgrading (thus not a clean install) to Leopard. Only happens in Safari (firefox no problem).
    This only happens when I'm in the office where I connect via a Microsoft ISA server. On the same machine with 10.4 I never once had this issue.
    One note is that since the upgrade to Leopard, authentication with ISA server does not work in the traditional way of domain\username (as it did before and should also now), but requires that I omit the domain name, this may be a clue to the cause? My Laptop is not part of any Windows domain I use a different user locally than to access any online services.
    I cannot upload crash details via the crash reporter (might be blocked on the proxy server)
    I would like to hear any suggestions.
    Thanks
    DT

    I've had this problem logged as a bug on Radar since September (yes before Leopard shipped). The bug report was closed as a duplicate but I got it re-opened when 10.5.1 shipped and it was still present. It used to be just https access that caused Omniweb and Safari to crash when I authenticated to the ISA proxy in work.
    After applying the latest updates (Security Update 2007-009 and Quicktime Broadcaster 1.5.2) any app that uses the proxy crashes. So http web access as well as https access not cause a crash. The Omni update check app crashes and takes the app in question with it when you launch it. Software update crashes. So do others but I forget the details.
    This only happens at work. Fine on other networks. If I browse on the same machine using IE under Windows XP in a Parallels VM using Shared networking there are no problems. This is a Leopard problem . Didn't happen under Tiger.
    Not good.
    This is not good.

  • Use of CE/WCCP with Microsoft ISA server acting as an authentication proxy.

    We have a design where all web users are authenticated against Active Directory by Microsofts ISA server proxy service prior to accessing web resources.
    Is it possible to implement a CE behind the ISA server, and still have the proxy authenticate users credentials?
    My concern is that WCCP will redirect traffic to the content engine first, if the content is not available, wil the content engine then forward to the proxy for authentication prior to the request going out to the web?
    Cheers,

    Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (http://www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at http://www.cisco.com/tac/caseopen
    If anyone else in the forum has some advice, please reply to this thread.
    Thank you for posting.

  • Reinstalling Microsoft Office Home and Business 2010 - OS 64 bit Windows 7 Home Premium on Dell Inspiron

    To start at the begining....no, that's not fair, that goes all the way back to March 24th!
    My hard drive has been wiped clean twice now...First time was not by MY choice...the guy from India just talked me through it, with no warning of what was going to be the result.  What a nightmare! 
    This 2nd time when I have "retrieved" my files from my external hard drive...my documents are there....just can't open them!  
    Following messages when opening Word or Outlook:
    "Please wait...."etc. "Configuration in Progress Microsoft Office Home and Business".... which takes forever!
    Then:
    "Your AutoCorrect file: c:\users\Tosi\AppData\Roaming\Microsoft\Office\MSO1033.acl, could not be saved.  the file may be read only, or you man not have permission to modify the file."
    Then:
    "Word cannot open existing file (Normal)
    In tyring to open Outlook...
    Big Red cirlce with an X in it:  Could not install the custom actions.  The form Cache file c:\users\Tosi\AppData\Local\Microsoft\Forms\FRMCACHE>DAT is not valid.  Contact your administrator.
    The same message as Word  "Your AutoCorrcet....etc....MSO1033.acl ...etc. "
    I have tried to change permissions...no luck.  How to I get FULL control over my own computer?  Please!
    When I do finally get Outlook open, nothing is in there.  I looked for my Outlook Data folder and I see that my .pst data file is in 5 places, yet it is not connecting with Outlook.  No mail, address or calendar are in there. (to back
    track...the first time I retrieved my stuff off the hard drive everything worked)
    Microsoft has promissed numerous times to assit me to resolve these problems through very lovely emails but no one has called to follow up and help me.  I really need help and I am running out of patience. 
    Soon I will be saying "Goodbye Microsoft!  Goodbye Dell!  Hello Apple!" 
    Help please! 
    Thank you,
    SMTosi

    As per your description, seems the installation of Office have got completely corrupted. I would suggest you to completely remove Office 2010 from your computer and then reinstall it.
    For how to remove/uninstall Office from your computer, I would suggest you to use Microsoft Fix It tool:
    http://support.microsoft.com/kb/971179
    After uninstalling Office, please restart your computer then try a reinstallation. If you don't have the Office 2010 installation source or DVD, please go to this website to get Office 2010 installation package: 
    http://office.microsoft.com/en-us/products/microsoft-office-2010-backup-FX101853122.aspx (you might need to provide the product key of Office 2010)
    Hope this helps. Thanks a lot for your patience.
    Thanks,
    Ethan Hua CHN
    TechNet Community Support

  • Your backup is from a different version of Microsoft SharePoint Foundation and cannot be restored to a server running The backup file should be restored to a server with version '12.0.0.6318' or later.

    am trying  to restore the bak file into a new  site collection in my sp 2010  standalone env.
    am getting error
    PS C:\Windows\system32> stsadm -o restore -url http://srvr1-01:123/sites/Repository -filename "C:\mBKUPCOPY\Sharepoint_bankup.bak"
    STSADM.EXE : Your backup is from a different version of Microsoft SharePoint Foundation and cannot be restored to a server running
    the current version. The backup file should be restored to a server with version '12.0.0.6318' or later.
    At line:1 char:1
    + stsadm -o restore -url http://srvr1-01:123/sites/Repository -filename "C: ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo : NotSpecified: (Your backup is ...6318' or later.:String) [], RemoteException
    + FullyQualifiedErrorId : NativeCommandError

    As stated in the other thread on this topic you can't restore a 2007 backup to 2010, it needs to be upgraded.
    https://social.technet.microsoft.com/Forums/en-US/31c70f0a-5d89-4308-895b-af0c2b249114/restore-the-site-collection-from-moss-2007-to-sp-2010-site-collec?forum=sharepointadminprevious

  • I am trying to open a website that is using Microsoft content viewer, and the page does not show. Any ideas on how to view this site using firefox. It works on IE.

    I am participating in an online class whose website uses Microsoft Content Viewer to view the class content. The browser opens a new page, but nothing is there. At the top of the tab it says Microsoft Content Viewer, and nothing else. Can anyone tell me how to view my course using Firefox? I would prefer not to use IE, but it works there.

    When originally creating the pdf, you would need to choose another pdf conversion setting. In Word if you use the pdf menu, change your settings there: Adobe PDF > Change Conversion Settings. I would use High Quality Print instead. If you use the File > Print method, click the Properties button next to the Adobe PDF printer selection.
    For your already created form, you can change the file so your users will not encounter issues. In Acrobat 9, which hopefully is similar in process to 8: Advanced > Preflight > Profile tab > PDF/A compliance > Remove PDF/A information.(You'll have to unsecure your form first).
    You can read about PDF/A files in the Help.

  • I am trying to setup Microsoft office mail and need assistance  - I am receiving the error, unable to find server and DNS setting in the Network

    I am trying to setup Microsoft office mail and need assistance  - I am receiving the error, unable to find server and DNS setting in the Network

    Which version of OSX and what email provider are you using.

  • Microsoft Office Home and Business Edition 2013

     Dear Team,
    We are planning to procure microsoft office home and business edition 2013. We want to procure 50- Microsoft office home and business edition. Please let us know if there is  any limitations in the licensing part as you have spoken to one of your
    executive in microsoft. As per him we procure as many as per our requirement, it is legal for 200 users.
    Thanks,
    Rakesh Kumar  

    Hi,
    I haven't found any other limitation in the licensing part except you should install Office on one PC at a time.
    If you want to purchase 50 copies, I'm pretty sure there's no problem. But you may have to maintain 50 licence keys along with boxes and invoice, be careful and don't mess them up :)
    Regards,
    Melon Chen
    TechNet Community Support

  • How do i install microsoft office home and student 2010?

    i need help installing 2010 microsoftoffice on my macbook air

    rosie33 wrote:
    how do i install microsoft office home and student 2010?
    i need help installing 2010 microsoftoffice on my macbook air
    Just to be clear, Office 2010 is for Windows.  Office 2011 is for Mac.  If you actually are trying to install Office 2010, you'll need to have installed Windows on your Mac either through Boot Camp or in a virtual machine.

  • Trouble installing Microsoft Office home and student 2010

    Hi,
    I'm new to Apple, i'm trying to insatl Microsoft office home and student 2010 onto my mac but it keeps saying "you can't open the application "setup.exe" because microsoft windows does not support the application"
    could anyone help?
    Kind regards
    Jordan

    Welcome to the Apple Support Communities
    It looks like you are trying to install Office 2010 on OS X. That's not possible because that version is for Windows, so you have to install Windows on your Mac. As you are going to use it only for Microsoft Office, download Parallels, VMware Fusion or VirtualBox, and install Windows on a virtual machine.
    Another option is to purchase Office for Mac > http://www.microsoft.com/mac

  • Microsoft Office Home and Student 2010

    I bought the family pack of Microsoft Office Home and Student 2010 and every time I try to install it on my computer it cancels and goes to this message saying "Setup has stopped working" "A problem caused the program to stop working correctly. Windows will
    close the program and notify you if a solution is available. I also already have word installed on my computer and every time I click the desktop icon it goes to the windows installer and prepares to install , but then it say fatal error during installation. 
    Can anyone help with this problem?

    Open Control Panel --> Programs and Features, remove any Office program you find. If you have problem when remove these programs, you can use the Fix-it Utility in the following support artcile:
    How to uninstall or remove Microsoft Office 2010 suites
    http://support.microsoft.com/kb/290301 
    After that, try run setup again.
    Max Meng
    TechNet Community Support

Maybe you are looking for

  • Does Apple make Electric Guitar cable to plug into my iMac?

    A few people have mentioned that I can buy a cable made by Apple that will allow me to plug my guitar into my iMac, but I don't see it for sale on apple.com Has anyone heard of this? Thanks a ton!

  • Error in IR

    Hi, Everytime we post IR, there is always a difference (only in decimal) between the balance of the IR and the total PO amount.  So what we do is we put the difference in the Unplanned del costs under details tab.  The difference used to fall  in the

  • Cannot find the Novell Connection Manager for LDAP

    Novell Connection Manger for Java/LDAP Cannot find the Novell Connection Manager for LDAP in download I am trying to connect through a Java client to the Apache Directory Studio, LDAP server....I have downloaded the classes from the download page...s

  • URL in a sticky note

    Hello, does anyone have an idea how to put a clickable URL in a sticky note? thanks, Ruben

  • PP BOM explosion during MRP

    Hello all, During MRP, BOMs for dependent assemblies are supposed to be exploded.  I am running MRP in the background.  Until recently, MRP is exploding only the first level BOMs such that subsequent assemblies are not exploded.  Is there a setting I