3 Replies Latest reply on Sep 4, 2015 10:15 AM by clath13

    A single user is unable to authenticate with IE

    clath13

      I have a MWG config that uses Kerberos with NTLM fallback for authentication.  I have a single user attempting to browse the Internet using IE - he browses just fine with Firefox and Chrome - everyone else browses fine with IE.  I packet trace it and I see the 407 but the user never sees the 407 page - it just says "page cannot be displayed".  Here is the auth debug log from one of his IE sessions - the following just repeats over and over with no successful authentication:

       

      [2015-09-03 13:24:40.968 -05:00] [4652] Kerberos (1, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=g&client=ie8&inputencoding =UTF-8&outputencoding=UTF-8

      [2015-09-03 13:24:40.969 -05:00] [4652] Kerberos (1, 172.31.24.27) Configuration: Kerberos Connection: 0x7f1f38549730 RR: 0x7f1fac90a4c0

      [2015-09-03 13:24:40.969 -05:00] [4652] Kerberos (1, 172.31.24.27) Added authentication method: Negotiate

      [2015-09-03 13:24:40.969 -05:00] [4652] Kerberos (1, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

      [2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=g&client=ie8&inputencoding =UTF-8&outputencoding=UTF-8

      [2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Configuration: NTLM Connection: 0x7f1f38549730 RR: 0x7f1fac90a4c0

      [2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

      [2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Added authentication method: Basic realm="inetgw"

      [2015-09-03 13:24:40.969 -05:00] [4652] NTLM (2, 172.31.24.27) Added authentication method: NTLM

      [2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=go&client=ie8&inputencodin g=UTF-8&outputencoding=UTF-8

      [2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) Configuration: Kerberos Connection: 0x7f1f38549730 RR: 0x7f1facd0daf0

      [2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) Added authentication method: Negotiate

      [2015-09-03 13:24:41.040 -05:00] [4613] Kerberos (3, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

      [2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=go&client=ie8&inputencodin g=UTF-8&outputencoding=UTF-8

      [2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Configuration: NTLM Connection: 0x7f1f38549730 RR: 0x7f1facd0daf0

      [2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

      [2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Added authentication method: Basic realm="inetgw"

      [2015-09-03 13:24:41.041 -05:00] [4613] NTLM (4, 172.31.24.27) Added authentication method: NTLM

      [2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=goo&client=ie8&inputencodi ng=UTF-8&outputencoding=UTF-8

      [2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) Configuration: Kerberos Connection: 0x7f1f38549730 RR: 0x7f1fae6e9550

      [2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) Added authentication method: Negotiate

      [2015-09-03 13:24:41.200 -05:00] [4615] Kerberos (5, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

      [2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) URL: http://clients5.google.com/complete/search?hl=en-US&q=goo&client=ie8&inputencodi ng=UTF-8&outputencoding=UTF-8

      [2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Configuration: NTLM Connection: 0x7f1f38549730 RR: 0x7f1fae6e9550

      [2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Authentication didn't return values, failure ID: 4, authentication failed: 0

      [2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Added authentication method: Basic realm="inetgw"

      [2015-09-03 13:24:41.201 -05:00] [4615] NTLM (6, 172.31.24.27) Added authentication method: NTLM

       

      any ideas?