Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[OneTrickPony]

I have tried MJ 8.0.254 with MS ISA Server again.  It does now ask me
to login, which is good, but it still cannot negotiate authentication with
the server.

The dump of the interaction seems a little strange.  Other app's send the
GET command in the same packet as the authorization info.  MJ sends the GET
command in one packet immediately followed by the authentication info' in another
packet.  I don't know if this is the problem or not.

Here is the dump from httptracer:
"Type" "ID1" "ID2" "Time" "Bytes" "Response Time" "Data"
"SEND" "15" "1" "12:27:03" "163" "0.010" "GET http://www.musicex.com/mediajukebox/mj_data/WebPages/default_v8.zip HTTP/1.1"
"RECIEVE" "15" "2" "12:27:03" "1460" "0.007" "HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the re"
"RECIEVE" "15" "3" "12:27:03" "1460" "0.001" "1460 bytes"
"RECIEVE" "15" "4" "12:27:03" "1311" "0.002" "1311 bytes"
"SEND" "16" "1" "12:27:03" "224" "0.006" "GET http://www.musicex.com/mediajukebox/mj_data/WebPages/default_v8.zip HTTP/1.1"
"RECIEVE" "16" "2" "12:27:03" "479" "0.006" "HTTP/1.1 407 Proxy Authentication Required ( Access is denied.  )"
"SEND" "16" "3" "12:27:03" "82" "0.024" "GET http://www.musicex.com/mediajukebox/mj_data/WebPages/default_v8.zip HTTP/1.1"
"SEND" "16" "4" "12:27:03" "306" "0.138" "Proxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAABgAGABwAAAADAAMAIgAAAAMAAwAlAAAAAAAAA"
"RECIEVE" "16" "5" "12:27:03" "1460" "0.135" "HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the re"
"RECIEVE" "16" "6" "12:27:03" "1460" "0.001" "1460 bytes"
"RECIEVE" "16" "7" "12:27:03" "1311" "0.002" "1311 bytes"
"SEND" "17" "1" "12:27:27" "236" "0.007" "GET http://www.musicex.com/mediajukebox/mj_data/WebPages/default_v8.zip HTTP/1.1"
"RECIEVE" "17" "2" "12:27:27" "479" "0.007" "HTTP/1.1 407 Proxy Authentication Required ( Access is denied.  )"
"SEND" "17" "3" "12:27:27" "82" "0.023" "GET http://www.musicex.com/mediajukebox/mj_data/WebPages/default_v8.zip HTTP/1.1"
"SEND" "17" "4" "12:27:27" "306" "0.135" "Proxy-Authorization: NTLM TlRMTVNTUAADAAAAGAAYAEAAAAAYABgAWAAAABgAGABwAAAADAAMAIgAAAAMAAwAlAAAAAAAAA"
"RECIEVE" "17" "5" "12:27:27" "1460" "0.133" "HTTP/1.1 407 Proxy Authentication Required ( The ISA Server requires authorization to fulfill the re"
"RECIEVE" "17" "6" "12:27:27" "1460" "0.001" "1460 bytes"
"RECIEVE" "17" "7" "12:27:27" "1311" "0.001" "1311 bytes"

I have purchased MJ for my home and would gladly buy another copy at the office
and recommend it to all my co-workers if you can find a solution to this problem.

Thank you.

[Raymond]

There is a known authentication issue with ISA and a patch released last August might have a fix for it. The link is http://www.microsoft.com/downloads/release.asp?releaseid=32094

Also, try this article and see whether it looks familiar to you.
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q297324

Let us know if you still encounter the problem.




Ray

[DillWeed]

I too, have had this problem for a long time. Win2k machines behind ISA Server 2000, never working properly, and never even getting the login prompt. BTW, getting the prompt indicates a problem, because the settings should come from IE anyway, and the prompt indicates the request was blocked.

I wish it would work, but I have tried many times.

Looking at the cleint dump wont give you enough info - if you can, look at the IP and firewall logs from ISA.

-DW

[OneTrickPony]

We have installed ISA 2000 Service Pack 1 which includes all the latest hotfixes.
I've looked at http://support.microsoft.com/default.aspx?scid=kb;en-us;Q297324 but
this does not apply because we currently have no domain restrictions. I have administrator
access to the ISA server so I just double checked this.

BTW, DillWeed, getting the prompt does not nessasarily indicate a problem, it's up to the app'
to decide how it wants to handle the authentication.  I have some apps that don't put up a
dialog but the majority of them do.  All the apps I'm currently using that do put up a login
dialog work fine after the login.  Except for MJ.

Hope this helps.

[DillWeed]

OTP:

You're a luck man... My experience is quite the opposite. Of the several apps that request login that I have encountered, they simply continue to ask for the login even though it was correctly entered. We use a domain with users and administrators, so perhaps that is the difference. We also use the firewall client on the client machines, though this applet only assists in identifying the proxy server.

In any event, I have never had any success getting MJ to work through it, though plenty other apps work.

-DW

[OneTrickPony]

DW:

Ya, you are right that some apps don't work through MS ISA Proxy.  I guess the only difference is I tend to remove anything that does not work.

I have found that even though Netscape Navigator v4.7x works after a login, v6.2 does not.

I doubt Microsoft is following the authentication protocol standard because I know Microsoft's idea of a "standard" is "whatever We decide it is". Unfortunately they are the monopolistic 400lb gorilla that leaves the rest of the software development world with no economically viable alternative but to spend the extra time to make their products work with the MS "standard".

OTP

[Raymond]

Is it possible for you to get the full HTTP response headers from the ISA server after MJ made the request? If not please give me your email and I will send you a small app that could retrieve the headers. Thanks.

btw, my email is raymond@jriver.com


Ray

[DillWeed]

Whoa! I don't know what happened, but everything is working now! I did get the login prompt, and packages were downloaded and installed properly after entering information. Something must have changed on MJ since I checked it last (a while back, like .227 builds).

No changes on the server side: Win2k Server as PDC, ISA Server 2000 (no service packs).

No changes on the client side either:

Media Jukebox  8.0.254

CPU: Intel Pentium III 923 MHz MMX
Memory: Total - 260 MB, Free - 75 MB
OS: Microsoft Windows 2000  Workstation 5.0 Service Pack 1 (Build 2195)

Internet Explorer: 5.50.4134.0600
ComCtl32.dll: 5.50.4134.600
Shlwapi.dll: 5.50.4134.600
Shell32.dll: 5.00.3103.1000
wnaspi32.dll: 1.04 , wnaspi32, Copyright © 1999 Jukka Poikolainen Software
Aspi32.sys: N/A

-DW

[Raymond]

We added support for NTLM authentication in the build around 205 which I think is the default authentication scheme for the ISA Server. However, we do not yet support Digest and Kerberos Authentication which are supported by ISA Server.


Ray