old-www/HOWTO/Web-Browsing-Behind-ISA-Ser...

75 lines
3.4 KiB
HTML

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2 Final//EN">
<HTML>
<HEAD>
<META NAME="GENERATOR" CONTENT="SGML-Tools 1.0.9">
<TITLE>Web Browsing Behind ISA Server HOWTO: Method #1 - Enable Basic Authentication</TITLE>
<LINK HREF="Web-Browsing-Behind-ISA-Server-HOWTO-4.html" REL=next>
<LINK HREF="Web-Browsing-Behind-ISA-Server-HOWTO-2.html" REL=previous>
<LINK HREF="Web-Browsing-Behind-ISA-Server-HOWTO.html#toc3" REL=contents>
</HEAD>
<BODY>
<A HREF="Web-Browsing-Behind-ISA-Server-HOWTO-4.html">Next</A>
<A HREF="Web-Browsing-Behind-ISA-Server-HOWTO-2.html">Previous</A>
<A HREF="Web-Browsing-Behind-ISA-Server-HOWTO.html#toc3">Contents</A>
<HR>
<H2><A NAME="s3">3. Method #1 - Enable Basic Authentication</A></H2>
<P>As mentioned above, due to Integrated Authentication support configured on ISA
server, third party browsers do not work behind it. In this situation you can make use of
another authentication scheme called 'Basic Authentication', commonly supported by
most browsers and most importantly by ISA Server too. If you work in a security
conscious environment this method is not recommended since during basic
authentication, the username and password sent are loosely encrypted.
<P>The point here is that to proceed with this method you will have to make sure that you
have legitimate access over configuring the ISA Server. If you cannot access the server
configuration console, then move on to the second method in the following section.
<P>
<H2><A NAME="ss3.1">3.1 Server Side Configuration</A>
</H2>
<P>All you need to do is fire up 'ISA Management' and follow these steps:
<OL>
<LI> Right-click your server and click on Properties.</LI>
<LI> Go to the Outgoing Web Requests tab, click the configured listener that you want to change, and then click Edit.</LI>
<LI> Click Basic authentication, and then select the domain in which the accounts exist that you want to authenticate.</LI>
<LI> Now it's time to move on to your Linux-based browser.</LI>
</OL>
<H2><A NAME="ss3.2">3.2 Client Side Configuration</A>
</H2>
<P>In particular, we will take Netscape as an example here.
<P>
<OL>
<LI> Start Netscape Communicator.</LI>
<LI> Click on the Edit menu and click Preferences.</LI>
<LI> Expand 'Advanced' node and click on 'Proxies'; you will see some options on the left.</LI>
<LI> Click on Manual proxy configuration, then click on the View button.</LI>
<LI> Put your ISA Server's IP address in the HTTP: box and the port where web cache is listening (usually 8080, depends what you set).</LI>
<LI> Click on OK to confirm your changes.</LI>
<LI> You will return back to the Preferences dialog.</LI>
<LI> Click on OK to apply your changes.</LI>
</OL>
<P>Load up a test url in your browser, it will ask you for authentication information,
In place of user, type DOMAIN\USER, where your DOMAIN being the Windows domain,
and USER being a legitimate domain user. In place of password, type the
user's password. Click on OK to continue. For example:
<P>
<HR>
<PRE>
User: CABLENET\Raheel
Password: Mypassword
Where CABLENET is my domain, Raheel is the user id
and Mypassword is my password.
</PRE>
<HR>
<P>You should now see the page loading successfully. If you use a different browser
you will need to explore and see if it supports Basic Authentication.
<P>
<HR>
<A HREF="Web-Browsing-Behind-ISA-Server-HOWTO-4.html">Next</A>
<A HREF="Web-Browsing-Behind-ISA-Server-HOWTO-2.html">Previous</A>
<A HREF="Web-Browsing-Behind-ISA-Server-HOWTO.html#toc3">Contents</A>
</BODY>
</HTML>