Article ID: 935767 - View products that this article applies to.
This article has been archived. It is offered "as is" and will no longer be updated.
You upgrade Microsoft Internet Security and Acceleration (ISA) Server 2004 Standard Edition to ISA Server 2004 Enterprise Edition and then to ISA Server 2006 Enterprise Edition. However, after you perform these two upgrades, authentication delegation does not work in the existing Web publishing rules. The Authentication Delegation property of the Web publishing rule displays the following messages:Additionally, if you create a new Web listener, the Client Authentication Method list in the Web listener displays two extra entries as follows:
Note The same problem occurs if you manually import a backup copy of ISA Server 2004 Enterprise Edition after you upgrade ISA Server 2004 to ISA Server 2006.
This problem occurs because the import function of ISA Server 2006 incorrectly sets the Predefined property of the "FBA with AD" authentication scheme and of the SecureID authentication scheme.
To work around this problem, use either of the following methods.
Method 1Edit the .xml file that you exported from ISA Server 2004 Enterprise Edition. To do this, follow these steps.
Note Perform this workaround before you import a backup copy of ISA Server 2004 Enterprise Edition.
Method 2Edit the Active Directory Application Mode (ADAM) instance that is used by ISA Server 2006 Enterprise Edition. To do this, follow these steps.
Note You may perform this workaround regardless of whether you have imported a backup copy of ISA Server 2004 Enterprise Edition.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
The "FBA with AD" authentication scheme is a predefined authentication scheme that enables forms-based (cookie) authentication by using the Active Directory directory service. The SecurID authentication scheme is a predefined authentication scheme that enables forms-based authentication by using RSA SecurID authentication.
For more information, visit the following Microsoft Web site: