cancel
Showing results for 
Search instead for 
Did you mean: 
clath13
Level 9

A single user is unable to authenticate with IE

Jump to solution

I have a MWG config that uses Kerberos with NTLM fallback for authentication.  I have a single user attempting to browse the Internet using IE - he browses just fine with Firefox and Chrome - everyone else browses fine with IE.  I packet trace it and I see the 407 but the user never sees the 407 page - it just says "page cannot be displayed".  Here is the auth debug log from one of his IE sessions - the following just repeats over and over with no successful authentication:

[2015-09-03 13:24:40.968 -05:00] [4652] Kerberos (1, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=g&client=ie8&inputencoding=UTF-8&outputencodin...

[2015-09-03 13:24:40.969 -05:00] [4652] Kerberos (1, 172.31.24.27) Configuration: Kerberos Connection: 0x7f1f38549730 RR: 0x7f1fac90a4c0

[2015-09-03 13:24:40.969 -05:00] [4652] Kerberos (1, 172.31.24.27) Added authentication method: Negotiate

[2015-09-03 13:24:40.969 -05:00] [4652] Kerberos (1, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

[2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=g&client=ie8&inputencoding=UTF-8&outputencodin...

[2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Configuration: NTLM Connection: 0x7f1f38549730 RR: 0x7f1fac90a4c0

[2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

[2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Added authentication method: Basic realm="inetgw"

[2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Added authentication method: NTLM

[2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=go&client=ie8&inputencoding=UTF-8&outputencodi...

[2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) Configuration: Kerberos Connection: 0x7f1f38549730 RR: 0x7f1facd0daf0

[2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) Added authentication method: Negotiate

[2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

[2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=go&client=ie8&inputencoding=UTF-8&outputencodi...

[2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Configuration: NTLM Connection: 0x7f1f38549730 RR: 0x7f1facd0daf0

[2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

[2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Added authentication method: Basic realm="inetgw"

[2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Added authentication method: NTLM

[2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=goo&client=ie8&inputencoding=UTF-8&outputencod...

[2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) Configuration: Kerberos Connection: 0x7f1f38549730 RR: 0x7f1fae6e9550

[2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) Added authentication method: Negotiate

[2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

[2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=goo&client=ie8&inputencoding=UTF-8&outputencod...

[2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Configuration: NTLM Connection: 0x7f1f38549730 RR: 0x7f1fae6e9550

[2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

[2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Added authentication method: Basic realm="inetgw"

[2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Added authentication method: NTLM

any ideas?

0 Kudos
1 Solution

Accepted Solutions
McAfee Employee

Re: A single user is unable to authenticate with IE

Jump to solution

Hi!

Perhaps they turned off integrated authentication in the browser? Looking at the output, the browser never even tries to send credentials (failure ID = 4, failed = 0).

Does it work if you use NTLM only?

Best Regards,

Jon

0 Kudos
3 Replies
McAfee Employee

Re: A single user is unable to authenticate with IE

Jump to solution

Hi!

Perhaps they turned off integrated authentication in the browser? Looking at the output, the browser never even tries to send credentials (failure ID = 4, failed = 0).

Does it work if you use NTLM only?

Best Regards,

Jon

0 Kudos
clath13
Level 9

Re: A single user is unable to authenticate with IE

Jump to solution

Browser settings haven't changed but checked them and they are configured correctly.  Using NTLM only fails also.  His browser was working until about a week ago.  I'm stumped and concerned.  Afraid more users will display this behavior.  Am having the user uninstall IE 11, should revert to IE10.  Will see if that helps.

0 Kudos
clath13
Level 9

Re: A single user is unable to authenticate with IE

Jump to solution

OK.  It worked for him on another PC, it worked for me on his PC.  We blew away his profile and a miracle occurred - it works now!  Sorry to clog up the boards with this.

0 Kudos