Problems editing a DCR over VPN

Hi All,
We are using TS 6.7.1 SP1 Patch1 on Windows 2003 server. When our Russian authors try to edit a DCR connecting over VPN, a security popup prompts them to enter username/pwd. Entering the right username/pwd or cancelling the security pop-up brings them to a edit screen where no button actions work. My guess is the security thingy disables all the Javascript on the DCT.
The users on local LAN don't face this problem. This behaviour is observed only when the user uses VPN to get to teamsite server. The russian authors are able to log into teamsite, browse around but are unable to edit DCR's.
> I have checked the firewall policies & port 80 is open for teamsite interaction
> I have made sure the authors have the right previlages to create or edit DCRs
> The servletd logs or any other teamsite logs dont seem to have any exceptions
> The IIS logs has 401 (access denied) status code for .js (javascript files)

Any inputs would be greatly appreciated.

Thanks

Find more posts tagged with

Comments

moonkhanna

Your problem more or less seems to me like a security setting in the user's browser.. or the java version\ OS, the user is using to VPN..

Try getting teamsite added to the trusted sites... browser settings to default...also get various diagniostics information from the user like JVM version, OS, Browser and Browser version, OS and OS version

Migrateduser

Your problem more or less seems to me like a security setting in the user's browser.. or the java version\ OS, the user is using to VPN..

Try getting teamsite added to the trusted sites... browser settings to default...also get various diagniostics information from the user like JVM version, OS, Browser and Browser version, OS and OS version

Thanks for the response,
One thing we did notice with the user is that he's able to get to our dev instance of teamsite & do edits. But not in QA or Prod. This rules out browser settings on his end.

moonkhanna

Thanks for the response,
One thing we did notice with the user is that he's able to get to our dev instance of teamsite & do edits. But not in QA or Prod. This rules out browser settings on his end.

My Assumption is that user is able to access TS when he is on locAL NETWORK...iN THAT CASE, ITS EITHER YOUR VPN OR THE USER'S CONNECTION.

SINCE USER IS ABLE TO ACCESS DEV SERVER, ITS NOT THE VPN CONNECTION, ITS DEFINITELY SOMETHING ON THE USER'S MACHINE OR SOME TINY CONFIGURATION ON YOUR PROD SERVER.

maybe the dev server is in his "trusted sites" AND THE PROD SERVER IS'NT?

If above is not the case, does your Dev instance also runs the same version of TS and the same version of OS server as the prod server? IS there any difference in the JVM used on the dev server and that on the prod server?

Migrateduser

Finally found the culprit. It was the anonymous user/pwd in IIS that was causing this issue. We had to reset the pwd of TSIMP_MACHINEUSER as the account creation had problems during TS installation.

On LAN, IIS & IE were able to resolve to local user account after failing to login using TSIMP_MachineUser a/c. But for users coming in thru VPN, since they dont have a local domain a/c it failed to login using the TSIMP_Machineuser.