Unable to authenticate non-domain users

[Vig]

Hi everyone,
I have a serious problem with my project server 2007. I just installed this
as a stand alone configuration and connected to AD domain. The problem i am
facing is all users in the domain can connect thru the project web access
(PWA) site but if a user's machine is not part of the domain he cannot be
authenticated using the PWA. What i mean is, the non domain user gets the PWA
prompt like normal for user name password box but upon entering the
credential using this format : domain\username and password it displays 'page
not found' If the same user logs on using a pc in the domain, he gets
authenticated and the page loads normally. I am using windows authentication,
using NTLM and even set basic authentication but it just does not work. I
really hope someone can help me as I need to get this up and running really
quick. Any further enquiries, can email me at vignesh1981atyahoo.com. I been
searching for days and reading so many stuff but i cannot manage to solve it.
Thank you so much for your help.

 

[Paul Conroy]

You need to determine firstly whether it's a network issue or an application
issue. Create a simple website on the Project Server on port 9999 using anon
authentication. Can a user on a non domain machine browse to it ok ? Turn
off anon auth and turn on basic auth and test again, finally test integrated
auth and test again. If you the user can successfully browse this page using
all authentication methods then the issue is with the application layer. If
they can't then the issue is with the network config of the non domain
machines.

Have you enabled IP/Sec within the domain ?

Check ipconfig, static routes, hostfile entries etc Can you ping and
nslookup the server ?

Check the time on the PC's is the same time as the domain.

Check that the PWA URL is in the trusted zone in IE.

Let me know how you get on

Paul
Chec
--
Did this post help you. Consider passing on the good will by making a
donation this great charity.
http://www.fundraiseonline.co.nz/TheProjectServerGuru/

http://theprojectserverguru.spaces.live.com

 

[Gary L. Chefetz [MVP]]

Vig:

I believe the system is behaving as expected. I suggest you look at using
Forms Authentication for your non-domain users.

--

Gary L. Chefetz, MVP
MSProjectExperts
For Project Server Consulting: http://www.msprojectexperts.com
For Project Server FAQS: http://www.projectserverexperts.com

 

[Paul Conroy]

Using pass-through accounts (local NT Accounts) will work in a single server
environment. When Project Server is deployed in a farm it starts to become
an administrative burden, though it should still work (I can connect and use
a VPC from a workgroup machine using the VPC's users accounts!)

Certainly implementing Forms authentication will resolve the current issues,
but for some people this has an equally heavy burden on administratice staff.


Did this post help you. Consider passing on the good will by making a
donation this great charity.
http://www.fundraiseonline.co.nz/TheProjectServerGuru/

http://theprojectserverguru.spaces.live.com

 

[Gary L. Chefetz [MVP]]

Pass through accounts with local logon rights is good for non domain
machines, wouldn't you say?

--

Gary L. Chefetz, MVP
MSProjectExperts
For Project Server Consulting: http://www.msprojectexperts.com
For Project Server FAQS: http://www.projectserverexperts.com