GFI Forums: Kerio Connect » Successful Connection but still "External authentication service rejected.."

Home » GFI User Forums » Kerio Connect » Successful Connection but still "External authentication service rejected.." (Even though I can connect and send/receive, security log shows "External authentication service rejected authentication due to invalid password or authentication restriction.")

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

Successful Connection but still "External authentication service rejected.." [message #149464]

Sun, 07 March 2021 17:56

jcooper
Messages: 113
Registered: May 2009
Location: Syracuse, NY

Not sure what's going on, but when I connect from outlook (successfully) I am getting these entries in the security log

07/Mar/2021 11:46:53] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.
[07/Mar/2021 11:47:05] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.
[07/Mar/2021 11:47:12] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.
[07/Mar/2021 11:47:20] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.

I recently changed my password on the DC and updated my local settings to match obviously, but it's strange that it still authenticates, and that I seem to only get this from my EWS (outlook) connection. iPhone and Kerio webmail generate no errors.

Yet, the connection works and I CAN send/receive.

Authenticate to windows 2012r2 and 2016 DCs.

Thanks,

Jeff

Report message to a moderator

Re: Successful Connection but still "External authentication service rejected.." [message #149475 is a reply to message #149464]

Wed, 10 March 2021 01:44

Nick.Geary
Messages: 73
Registered: January 2021

Are you sure it's not a mobile device or other application attempting to authenticate? Another possibility is an issue of Clock offset. But I see you have an open support ticket, and we're in the process of gather more details on the environment.

https://support.kerioconnect.gfi.com/hc/en-us/articles/36001 5196339-Kerberos-Authentication-Failing-Because-of-Clock-Off set-Difference

Nick Geary
GFI Software

Report message to a moderator

Re: Successful Connection but still "External authentication service rejected.." [message #149521 is a reply to message #149464]

Tue, 23 March 2021 14:19

jcooper
Messages: 113
Registered: May 2009
Location: Syracuse, NY

Turns out it was sort of an Apple thing. I did not realize that "EWS" applied not only to Outlook, but to accounts set up through MacOS's Internet Accounts System Preferences. Not sure why, but there was an Exchange account set up here with its own copy of my recently changed password, so THAT'S what was generating the error.

I have no idea how or when that got set up but I've turned it off.

Thanks,

Jeff

Report message to a moderator

Previous Topic:	Error 1911 When Installing / Upgrading Outlook Connector
Next Topic:	Kerio Connect 9.3.1 Release Notes

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

] [

]

Current Time: Mon Mar 20 13:35:34 CET 2023

Total time taken to generate the page: 0.02640 seconds