wingate ntlm problem

[mohammedxp]

dir all memebers
first i would like to thanks you all for the great info that i found in this forum ,
second i will get to my problem i have been tring the wingate 6.6.4 for sometime in small scale 4 machine , ad server win server 2003 st , wingate server 2 client win server 2008 std xp and win 7 ,
and it work fine with me i test for about tow week and i get a good result im using user must be authenticated as you can see in the attachment with the ntlm .
when i start to join the other users i faced many problem with the athontecated machnizem and it really make a lot of problems some times i could not login by the username and the passowrd ""active directory "of the user since im using the ad database by the way the database get syncronize direct and i can see all the active directory user in the wingate database window ,
for example im on machine xyz and im trying to log the internat but i couldnt because of the wingate keep asking me to enter the username and password window but it will not accept it i already login to the operating sytem and i can ping and retrive data from AD server but i cant login byt the xyz crediantal once i log off and login on the same xyz machine with my crediantal admin i can browse without no problem . this is the first problem and the main one
the second problem is some of the user who were able to login at the first time they are getting the username and password again and again even i do what in the manual of the "1. Depending on the browser used, you can set the browser security settings for user authentication to Use current Windows Username and Password. This will save the user having to enter their Username and password every time the open a browser session. Obviously this must be a valid Windows user and password in the database that WinGate has been set to use. " .
i know my thread is too long but i wish some one to give me a direct answers since the help support wasnot able to solve this issue
p.s in the attachment you can find the config files under this url
https://docs.google.com/leaf?id=0B9fBII ... ist&num=50
regards

Attachments

3.jpg (59.49 KiB) Viewed 2476 times

2.jpg (44.49 KiB) Viewed 2476 times

1.jpg (50.55 KiB) Viewed 2476 times

[adrien]

Hi Mohammed

I think we are going to need to do a packet capture to see why NTLM is failing.

Are you able to do that? WinGate has packet capturing built in.

Regards

Adrien

[mohammedxp]

yeah i can do that , but i want to let you know that i m using a now a new machine with with win server 2003 s with the same wingate configuration . and its working fine i havnt face any of the ntlm problem that i face it in the 2008 win server s im not sure why , i just simply disconnect the 2008 machine and run 2003 and it works .the ntlm works fine ,
the win server 2008 s sp1 .
regards
packet capture could you please inform me from where i can get it

[adrien]

WinGate can do packet capturing.

1. Go in GateKeeper to Options, Packet Capture
2. Select a file
3. Specify filter packets, basic filter
4. Dest port range 80 to 80, leave rule is bidirectional checked.
5. click start

once you've done the failed NTLM, click the stop button and send the cap file to support@wingate.com

I'm wondering if there's an NTLM buffer overflow issue on 2k8. The later OSes use larger and larger NTLM buffers. This is for WWW through WinGate correct?

Regards

Adrien