Server 2003 VPN clients can't verify username and password

Hi,
Hoping someone can help or point me in the right direction. I have a Windows Server 2003 R2 standard SP2 running RRAS. It has Dual NIC's and is configured for PPTP VPN. I am using a BT Business Hub 5 for internet access and using the BT Static IP service.
The BT Hub assigns the static IP address chosen to the Server using DHCP. The firewall is configured to port forward PPTP traffic to the 2003 server. This all works correctly.
The 2003 server is on a domain where the DC is a 2008 R2 server. The DC also acts as the DNS and DHCP for the network.
The default gateway for the domain is pointed towards our WinGate proxy server which also acts as a DNS server.
The 2003 server LAN NIC is configured manually, usually I would not configure a deafult gateway on the LAN NIC as the WAN NIC needs the default gateway for the BT Hub.
The problem I am having is if a default gateway is configured on the LAN NIC, I can connect to the VPN and it will logon to the network. Once connected everything works ok. If the connection drops, when trying to reconnect the client can no longer verify
the user name and password against the domain and the connection is refused.
If I do not have a default gateway configured in the LAN NIC the VPN clients can not verify the username and password for the domain at all and I get RPC failure errors in the event viewer with the source dnsapi.
Once this error occurs the only way I can get the clients to reconnect is to disable the WAN NIC, restart the RRAS service and enable the WAN NIC again.
Any insight will be much appreciated.

Hello,
for Networking configuration questions better ask in
http://social.technet.microsoft.com/Forums/windowsserver/en-US/home#forum=winserverNIS&filter=alltypes&sort=lastpostdesc&content=Search
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://blogs.msmvps.com/MWeber
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Twitter:  

Similar Messages

  • VPN Verifying Username and Password

    I have defined a VPN connection and selected the following security items:
    IKEv2
    Authentication using machine certificates (NO userID and Password' NO EAP)
    Yet when I try to connect the first connection message that pops up is " Verifying Username and Password "
    That sits there a few seconds
    Then the next message is "Verifying Username and Password "
                                          "error 13819  Invalid
    Certificate Type"
    WHY is the process trying to verify a user name and password when I've done the following:
    Defining the VPN connection I DID NOT enter a userid and password, I left these fields blank.
    I also DID NOT select EAP authentication (I'm using IKEv2)
    I selected machine certificates.
    Is there a problem with the windows VPN logic?

    Hi 2UCowpoke,
    For machine certificate connection require moving/installing the certificate to the machine store. it is possibly due to either the client not having a
    certificate or the server certificate is incorrect.
    I found similar case on TechNet for your reference
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/f010a81b-8dca-422e-9356-3ce88b867438/cant-establish-ikev2-vpn-connection-error-13819-invalid-certificate-type?forum=winserversecurity
    Since questions in your reply is related to Windows Server certificate, I’d suggest that we post at
    Windows Server Security forum. There you can get more effective suggestion by other experts who familiar with design of certificate. Your understanding is highly appreciated.
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/home?forum=winserversecurity
    Regards,
    D. Wu
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Reg : How can I get  Username and Password in FTP Server in HANA

    Hi All,
      Any one can you please guide me....How can i get username and Password of FTP Server in SAP HANA?
    Regards,
    Arjun

    Hi Arjun,
    Are you looking for external authentication(External ID option) in HANA Studio instead of logging by entering HANA User and Pwd(which is internal)?
    You can look for the following Security guide which will give you some insight on this.
    http://help.sap.com/hana/hana1_sec_en.pdf
    Rgds,
    Murali

  • How can I pass username and password in a client bean to call a webservice?

    Hi,
    I have created a Client Java Bean for a web service (an automatically created Service from a Bapi) that requires username and password. How can I pass username and password in the code?
    Thank you!
    Julia
    This is my code:
    public Z_FlightGetlist port;
    Business Method.
    public String test1234() {
    try{
    BAPI_FLIGHT_GETLIST list = new BAPI_FLIGHT_GETLIST();
    list.setAIRLINE("KLM");
    port.BAPI_FLIGHT_GETLIST(list);
    return "ok";
    catch(Throwable e){
    return "error"+e;
    public void ejbCreate() throws CreateException {
    try{
    InitialContext ic = new InitialContext();
    Z_FlightGetlistService s = (Z_FlightGetlistService)ic.lookup ("java:comp/env/FlightProxy");
    Z_FlightGetlist vi = (Z_FlightGetlist)s.getLogicalPort(Z_FlightGetlist.class);
    this.port = vi;
    catch(Throwable e)

    Hello Julia,
    Check this document
    http://help.sap.com/saphelp_nw04/helpdata/en/50/a5d13f83a14d21e10000000a1550b0/frameset.htm
    Best regards, Maksim Rashchynski.

  • HT5439 i can't access my university anyway, how can i add username and password?

    i try to use this solution to apply my university proxy, but it dodn't work. Can u suggest me more about how can i add username and password?

    You should be able to use the OpenVPN Connect app running on your iPad to connect your iPad to the VPN directly. It is an official OpenVPN client for iOS devices.
    In what way is it "not compatible"? Have you tried it? Tunnelblick is an OpenVPN client, so your school's VPN is using the OpenVPN protocol. That means any OpenVPN client should be able to access it. (It is possible, but unlikely, that your school uses encryption that is not available on the iPad, but that would be very unusual.)
    Otherwise, a remote control app on your iPad would let you control your Mac at home. "Back to My Mac", for example, would allow you to control your Mac remotely. The tricky part of this is that usually a VPN is set up to send all Internet traffic via the VPN server, and I'm not sure how that would work with "Back to My Mac".

  • No cursor on any website, and boxes are too small to type username and password. Example I can't type username and password for yahoo e-mail

    Example of no cursor. Any website, such as youtube, there is no cursor in the box, and there are no letters when I type, but the system recognizes what I type. As for e-mail, hotmail works o.k., but with yahoo the boxes for username and password are too small, there is no cursor and I can't type anything. With gmail, there is no cursor, but I can type my username and password.

    Try:
    iOS: Troubleshooting FaceTime and iMessage activation

  • Can't get username and password into client proxy

    Hello all,
    I am creating a client proxy using class xem_measurementImport (the doMeasurementImport method). I call this from an ABAP program, and it pushes measurement data into the EC (Environmental Compliance) system, which runs in Java.  Everything has been running well, except for one thing.  When I run the program in the foreground, it prompts me for a username and password, and when I run it in the background (it will be run that way in production), it gets a SOAP/authentication fails error message from the method, since username & password could not be supplied.  I tried to recreate my client proxy, but when it is created, the wizard does not prompt me for my name & password, which it should do, so that it can supply it to the calling program via the logical port.  Is this a configuration issue that Basis needs to address?   Thanks for any help you can give.

    gauravjlj wrote:
    because client will install the mysql not me. and I need username and password for the further programming.
    there is any file in mysql installation which can give me the username and password.
    please tell me.
    thanks
    gaurav agrawalNo. If the "client" is installing the DB (and, I assume, administrating it, I.E. removing the large security holes that exist in the default installation), then why don't you simply ask the "client" for this info a dialog?
    Otherwise, you should be providing a script in your installation package that modifies the DB to your needs, and instruct the "client" to install a "default" root password until after the script has run, and then to change the "root" password again. A Java application should definately not be worried about this stuff.

  • I'm trying to access a forum that requires a user name and password.  When I do it on my mac it tells me the password is incorrect but when I do it on my iPad, I can access it without any problem.  I can confirm the username and password are the same

    I am trying to access a forum for which you need a username and password but it keeps telling me the username/password i've entered are incorrect.  Bizarrely, when I enter the same username/password combination on my iPad, it grants access without any problem. 
    What could be causing this, is it an issue with cookies, caches or similar.  How can I resolve it?  The forum administrator is at a loss as to what the problem is.

    Try the following steps in Safari to see if they help:
    1) First try clearing the Safari cache.  To do this pull down the Safari menu and select 'Empty cache...', then try logging into the site again.
    2) If the issue continues then reset Safari by pulling down the Safari menu and select'Reset Safari...'. You will be presented with a list of items that can be reset. I suggest selecting the 'Reset saved names and passwords', and 'Remove all website data' options at a minimum.
    Here is a list of the options and what they do. I pulled it from the Safari help page.
    Clear history:
    Clears the list of webpages you viewed.
    Reset Top Sites:
    Clears any changes you made to Top Sites, such as adding or pinning sites. If you also clear your history, your Top Sites page reverts to showing the webpage previews displayed when you first installed Safari.
    Remove all webpage preview images:
    Clears any thumbnail images Safari saved of webpages you viewed.
    Clear the Downloads window:
    Clears the list of files you downloaded from websites. Only the names are removed; the files themselves are still on your disk until you remove them.
    Remove all website icons:
    Removes website icons, which are small graphics that help identify sites on the Internet. You see them in the Safari address field and bookmarks list, and other places. These icons are stored on your computer.
    Remove saved names and passwords:
    Removes user names and passwords that Safari automatically fills in at websites that require them (if the AutoFill feature is turned on).
    Remove other AutoFill form text:
    Removes some personal information, such as telephone numbers, that Safari uses to automatically fill in forms on webpages (if the AutoFill feature is turned on). Removing AutoFill information does not remove information from your address book.
    Close all Safari windows:
    If you don’t close all Safari windows, someone could use the Back and Forward buttons to view the webpages you visited.
    Reset all location warnings:
    Clears any information websites saved about your location.
    Remove all website data:
    Removes cookies, tracking information, and other data that websites stored on your computer.

  • HT1338 how can i find username and password for MobileMe ?

    please let me know which username and password should use for Mobileme.

    MobileMe is closed; if you had an account and did not migrate it to iCloud it's lost. If you migrated it to iCloud the login is your @me.com email address and the password is what you chose.
    If you never had a MobileMe account (and paid for it prior to June last year) the situation does not arise - you may have come across some old documentation encouraging you to sign up, but this is no longer possible.
    You can open an iCloud account for free, which will give you email and syncing facilities:
    Get Started with iCloud

  • Can you set username and password when using OWA_UTIL.REDIRECT_URL?

    If you have a PSP that runs under a DAD that includes username and password and therefore doesn't require users to log in and you want it to do OWA_UTIL.REDIRECT_URL to another PSP that runs under another DAD that normally requires login using basic database authentication and the first PSP already "knows" the user's username and password, is there any way to use them to skip the login dialog of the second page? Maybe hack into the request and use UTL_HTTP.SET_AUTHENTICATION somehow...?

    That doesn't seem to work, and trying that kind of url directly from the browser says "invalid syntax error", so maybe Oracle appserver just doesn't let you do that.
    I got the idea of trying to add an authorization header:
    OWA_UTIL.MIME_HEADER(BCLOSE_HEADER => FALSE);
    HTP.P( 'Authorization: Basic mybase64encodedcredentials' );
    OWA_UTIL.REDIRECT_URL('myurl', FALSE);
    OWA_UTIL.HTTP_HEADER_CLOSE;
    ...but it didn't work either and with a little further thought I guess it's obvious why: any code here modifies the response header for this request, not the request header for the redirect.
    Message was edited by:
    psalmu

  • Phonefactor with RRAS(Windows Server 2003) - VPN client timeout after 20 seconds -- too fast!

    [Note that I have previously posted this question on Experts Exchange... but have not found a solution yet].
    We are a small business and would like to switch to two-factor authentication for VPN connections. We spent nearly a year helping Barracuda debug their small business VPN appliance and finally they took their boxes back and gave us back our money - they
    just couldn't get file sharing to work consistently with some new firmware they had to install due to a patent case.
    So... now we are trying Phonefactor.
    Our VPN setup is RRAS on a Windows Server 2003 domain controller.
    We have installed Phonefactor, enabled it as a Radius server, and configured RRAS to point to Phonefactor for Radius authentication. We configured phonefactor to send text messages for authentication, as we figured that would be less disruptive than a phone
    call.
    It all works except... the timeout for VPN clients is only 20 seconds! By the time we receive the text message on a cell phone, sometimes there is only 5 or 6 seconds to get the six digit code typed into a reply on the cell phone... and unless we are really
    nimble, that is frequently not enough time!
    When the VPN client times out, it gives an Error 718 "The connection was terminated because the remote computer did not respond in a timely manner."
    How can we increase the timeout on the VPN clients, so we can more reliably enter the authentication code in a reply back to phonefactor?
    Things we have tried:
    1) Connecting (PPTP) from different Windows clients to see if we get different timeout limits. So far we have tried several Windows 7 boxes and a Windows Server 2003 as the client, but in all cases the timeout is 20 seconds.
    2) On the windows clients: Searching through the PPTP client settings to see if there is one labeled "connection timeout". So far we have found nothing.
    3) On the windows 2003 server: Modifying the RRAS Radius Server time-out to be 30 seconds, 60 seconds, 300 seconds. We've tried restarting RRAS after these changes, but the client connection timeout is still 20 seconds.
    4) In the phonefactor configuration: Searching through the radius server settings to see if there is one labeled "connection timeout". So far we have found nothing.
    5) Using NTRadPing to connect directly to the phonefactor radius server. With NTRadPing we were able to wait more than 60 seconds without a timeout from phonefactor. So we don't *think* at this point that the issue is within phonefactor.
    6) We have asked phonefactor support, but their response is "hmmm... good question, we don't know, that sounds like a problem with your vpn client". And they could well be correct.
    7) Search the web for how to increase either the stock windows VPN client timeout, or the RRAS radius authentication timeout. No luck so far.
    8) Try this registry hack:
    http://windowsitpro.com/networking/solving-ras-718-error. Didn't help.
    Any ideas?
    thanks!

    Hi fdc2005,
    Thanks for the post.
    However, generally, we first type User Name, Password, then click connect to establish the VPN connection. Such as:
    Therefore, I have a little confusion about the timeout you mentioned. Would you please provide us more details.
    Regarding error 718, please check if the following could help:
    If you have a third-party VPN server which does not support MS-CHAPv2 as an authentication method and supports only MS-CHAPv1, you will need to use either CHAP or PAP to connect from the Windows Vista VPN client until the server you use starts supporting MS-CHAPv2.
    Steps to follow for resolution:
    (1) Check if the Routing and Remote Access Server (RRAS) is configured to allow connections with MS-CHAPv2
    (2) Check if the RADIUS server policy supports MSCHAPv2 (This step is needed if you control access to clients using Remote Access Policies on the IAS/NPS server)
    Quote from:
    Troubleshooting Vista VPN problems.
    Hope this helps.
    Jeremy Wu
    TechNet Community Support

  • I can't log on to sites. I can enter my username and password but the "SIgn In" or "Log On" button is missing.

    The "Sign In" button is missing. The logon box stays put and the page I'm trying to get to is grayed out behind it. On sites with captchas, there is no captcha for me to type. Just some lines of type that say "captcha challenge" piled on top of each other.

    Make sure that you allow pages to choose their colors and that you haven't enabled High Contrast in the Accessibility settings.
    *Tools > Options > Content : Fonts & Colors > Colors : [X] "Allow pages to choose their own colors, instead of my selections above"
    *https://support.mozilla.org/kb/Options+window+-+Content+panel
    Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions (Firefox/Tools > Add-ons > Extensions) or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance).
    *Do not click the Reset button on the Safe mode start window or otherwise make changes.
    *https://support.mozilla.org/kb/Safe+Mode
    *https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

  • Microsoft Office Outlook 2003. Repetitive request for Username and Password.

    Shortly after opening Microsoft Office Outlook 2003 I will be asked for Username and Password repeatedly. How can I stop this from happening?

    Hi,
    To understand more about the issue, I’d like to confirm the following information:
    1. Does the issue still occur if you change another client machine？
    2. Is there any error by testing RPC over HTTPS connectivity through ExRCA?
    https://www.testexchangeconnectivity.com/
    If you have any question, please feel free to let me know.
    Thanks,
    Angela Shi
    TechNet Community Support

  • Multiple iCal icloud errors. One saying username and password incorrect the other Server 500 error when removing event

    Good day all
    One of my clients is having intermitting issues with her iCal on her Macbook. Her iCal is connected to her iCloud account along with her contacts, she access the iCloud data via her iPhone and her iPad.
    The syncing between her devices with the iCloud gives her no issues when it comes to her contacts but her iCloud on her Macbook is causing a lot of grief. She can accept and add iCal events most of the time but every now and then she gets the error "iCal can't log into your iCloud account becasue your password may be incorrect. The server did not recognize your username or password for the account iCloud. Make sure you enter them correctly". Here is a picture of the error.
    I can confirm her username and password is correct by clicking ok to the error and making an event in the calander or making a new contact in her contacts and confirm on icloud.com that the new additions did make it to the iCloud.
    On top of the above error she also gets the following error intermittently (seems to happen the most when she attempts to remove a calander item). The error is "The server responded with an error. The request for "Meeting name" in "category" in account iCloud failed. The server responded with 500 to operation CalDAVWriteEntityQueueableOperation. Stay offline/Revert to Server/Go Online" once more below is a picture
    Any help on this subject would be greatly appreshated
    Thanks

    Good day all
    One of my clients is having intermitting issues with her iCal on her Macbook. Her iCal is connected to her iCloud account along with her contacts, she access the iCloud data via her iPhone and her iPad.
    The syncing between her devices with the iCloud gives her no issues when it comes to her contacts but her iCloud on her Macbook is causing a lot of grief. She can accept and add iCal events most of the time but every now and then she gets the error "iCal can't log into your iCloud account becasue your password may be incorrect. The server did not recognize your username or password for the account iCloud. Make sure you enter them correctly". Here is a picture of the error.
    I can confirm her username and password is correct by clicking ok to the error and making an event in the calander or making a new contact in her contacts and confirm on icloud.com that the new additions did make it to the iCloud.
    On top of the above error she also gets the following error intermittently (seems to happen the most when she attempts to remove a calander item). The error is "The server responded with an error. The request for "Meeting name" in "category" in account iCloud failed. The server responded with 500 to operation CalDAVWriteEntityQueueableOperation. Stay offline/Revert to Server/Go Online" once more below is a picture
    Any help on this subject would be greatly appreshated
    Thanks

  • How can we disable " XDB Requires a username and password"?

    Hello,
    I've just performed an Apex 4 installation on top of a DB 11.2.0.2.
    All is fine.
    No problem fine with FF, IE and Safari, but with Chrome I always have a pop up saying " The server XXXX: port at XDB requires a username and password".
    How can I disable that, or fix it definitively?
    Thanks
    Fred

    Sure.
    On my system Anonymous and XDB account were already unlocked and both used the same password.
    I simply executed the PL/SQL block that you can find here: http://www.apexexplorer.com/wp-content/uploads/2010/11/XDB-Password-Issue.pdf
    I bounced the listener.
    Hope that help
    Regards,
    Fred

Maybe you are looking for