WEB SERVICE AND PROXY SERVER

gdr · Post by **gdr** » Fri Oct 27, 2006 1:09 am

We are experiencing a problem with HM web interface published via proxy server.
We cannot access the web page. It start asking (correctly) user and password (from HM web service), but after we put the correct user and password, it ask it again (3 times) and then appears a page with ERROR#401: Unauthorized.
It all starts after the installation of SP2 on isa server (no modifications to the rules)

The same proxy publish other 12 sites and they works correctly.

HM version 6.10 on xp professional SP2 with all patches applied.
Proxy isa server standard edition SP2 on win 2003 server SP1
The proxy server is in a DMZ

Is anyone experiencing the same problem or have some suggestion ?

Thank you

Regards

Gabriel

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Oct 27, 2006 1:41 am

Looks like you have to specify properly IP-address into "Accept remote connection from" listbox for appropriate user (Options > RCI > User Profiles). I assume, you have specified your own IP-address there, but when you use proxy, you have to specified proxy IP-address too.
You may use HostMonitor menu View > RCI status window to find out, what exact IP-address is used to connect to Web Service.

Regards,
Max

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Oct 27, 2006 2:17 am

You should specify IP-address of machine, where web service is running, into "Accept remote connection from" listbox (Options > RCI > User Profiles). It might help.

Regards,
Max

gdr · Post by **gdr** » Fri Oct 27, 2006 2:35 am

I've never specified the proxy IP address in RCI for my user.
I've tried now but it doesn't work.
I only had 127.0.0.1 (is localhost isn't it?) and the ip address of my workstation on the LAN. (now there is the ip of the proxy too but it doesn't work).
I don't think the problem is the ip address in RCI, if i try connectig to web service from ANY workstation on the lan it work well (HM is in LAN to).
Other users (in lan) can connect normally to web services and they RCI profile has only ip 127.0.0.1

It doesn't work only if i try from Internet

I think it's something regarding the installation of ISA SP2 because we didn't made any change in configuration of HM or web services and with ISA SP1 it was working (even without specifiyng ip address in RCI profiles).

Regards,

Gabriel

P.s.
I've read your second response after writing the response.
i've tried this too but it doesn't work, by the way web services is placed on the same computer of HM

Regards

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Oct 27, 2006 3:05 am

So, what exact error do you see in RCI Status window (HM menu View > RCI Status) after login attempt?

Regards,
Max

gdr · Post by **gdr** » Fri Oct 27, 2006 3:18 am

I see nothing at all if i try the connection from internet.
If i try from LAN i see correct connection coming from 127.0.0.1

Regards

Gabriel

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Oct 27, 2006 3:30 am

gdr wrote:I see nothing at all if i try the connection from internet.
If i try from LAN i see correct connection coming from 127.0.0.1

Hm. Do you see the login dialog but you do not see any records in "Latest commands" area of RCI status Window? Strange. What interface and port have you specified for Web Service (HM Web Service window)? What address and port have you specified for RCI (HostMonitor)?

Regards,
Max

gdr · Post by **gdr** » Fri Oct 27, 2006 3:41 am

In web service port is 80 and interface is 0.0.0.0 (web server)
In Rci (hostmonitor) port is 1055 and address is 127.0.0.1

regards,
Gabriel

p.s.
if you want to try the external address is http://ammps.banksiel.it

try with user: xxxxxx(canceled) password: xxxxx (canceled)

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Oct 27, 2006 8:01 am

gdr wrote:In web service port is 80 and interface is 0.0.0.0 (web server)

I suppose, there are several network interfaces on machine where Web Service and HostMonitor are running? Could you specify 0.0.0.0 interface into "Accept remote connection from" listbox for appropriate user (Options > RCI > User Profiles)? Just for testing?

Regards,
Max

KS-Soft Europe · Post by **KS-Soft Europe** » Fri Oct 27, 2006 8:15 am

Sorry, I did not find any usefull information regarding ISA SP2. Could you you read the following articles:
http://support.microsoft.com/kb/920715
http://support.microsoft.com/kb/915411

It might help.

Regards,
Max

gdr · Post by **gdr** » Fri Oct 27, 2006 9:47 am

we have only 1 network interface on the machine running HM and web services.
I've tried to put 0.0.0.0 in accept remote connection but it still doesn't work and i still see nothing in RCi status windows while trying to log on.
i've read the 2 articles in microsoft KB but the first is for web client running with configuration sript (we don't use it) and the second is for isa 2000 sp2 (not isa2004)

I think i will try some other trick on Isa 2004 or in the worse case i will downgrade to sp1

Meanwhile if you have some other ideas please write here and i will try as soon as possible.

Thank you

Regards.

Gabriel

KS-Soft · Post by **KS-Soft** » Fri Oct 27, 2006 11:42 am

1) What version of Web Service and HostMonitor do you use? I don't think this problem relates to versions incompatibility. However its always good to know what exactly software do you use.

2) Below "#ERROR#401: Unauthorized" message you should see another text. Like "Invalid user name or password", "account disabled" or "Unacceptable IP address". What exactly message do you see?

3)

I don't think the problem is the ip address in RCI, if i try connectig to web service from ANY workstation on the lan it work well (HM is in LAN to)

That's really strange part. I can assume Proxy translates or replaces username and/or password

We may know more when you answer to item #2

Regards
Alex

gdr · Post by **gdr** » Mon Oct 30, 2006 2:00 am

HM version 6.10 web service 2.73 and sorry but i see no more then
"#ERROR#401: Unauthorized", no more information provided.

Regards

Gabriel

KS-Soft · Post by **KS-Soft** » Mon Oct 30, 2006 12:15 pm

No more information provided? I assume your browser cannot connect to our Web Service at all. Probably it connects to different web server? Or may be your proxy removes part of the answer and forwards HTTP responce code only?
We can guess for long time

Its good to use some "sniffer" (network packet analyzer) to check what exactly is going on in your network. Do you have some?

Regards
Alex

KS-Soft · Post by **KS-Soft** » Mon Oct 30, 2006 2:22 pm

P.S.
Not sure this will help, however... have you installed the following patch for ISA http://www.microsoft.com/downloads/deta ... laylang=en ?

Regards
Alex