000021565 - How to enable RRAS / PPTP users to use Microsoft Windows domain credentials to authenticate via Active Directory Domain with RSA Authentication Agent 6.0 installed

Document created by RSA Customer Support Employee on Jun 16, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000021565
Applies ToRSA SecurID for Microsoft Windows
RSA Authentication Manager 6.0
RSA Authentication Agent 6.0 for Microsoft Windows
RSA Authentication Agent 6.0 - Local, Remote, and Domain Challenge set to OFF
Microsoft Windows 2000 RRAS / PPTP
Microsoft Windows 2000 Active Directory
Microsoft Windows 2000 Domain Controller
Microsoft Internet Security and Acceleration (ISA) 2000 Server
Wireless Authentication
Macintosh
RSA Authentication Agent 6.0 is not installed on the RRAS / PPTP server
RSA Authentication Agent 6.0 is installed on the RRAS / PPTP server
IssueHow to enable RRAS / PPTP users to use Microsoft Windows domain credentials to authenticate via Active Directory Domain with RSA Authentication Agent 6.0 installed
RRAS / PPTP users cannot Windows-authenticate to Active Directory Domain controllers when RSA Authentication Agent 6.0 is installed
Error: "NTLM Msv1_0SubAuthenticationFilter called, LogonLevel=2" in RSA Authentication Agent debug log
Error: "Access denied. Workstation is empty; returning STATUS_INVALID_WORKSTATION" in RSA Authentication Agent debug log
Error: "Workstation name empty, invalid workstation" in RSA Authentication Agent debug log
Users can not log into domain from Macintosh clients after installing the agent on Active Directory server.
CauseDebug log indicate associated File: SUBAUTH.c
ResolutionTo correct this issue, go into the RSA Authentication Agent applet on the Domain Controllers and click the Domain tab, click the Advanced domain options, and turn on "Ignore blank name from third party authentication requests" and apply the change. NOTE: You do not need to restart any services or reboot machines.
Legacy Article IDa23682

Attachments

    Outcomes