GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Connect » Successful Connection but still "External authentication service rejected.." (Even though I can connect and send/receive, security log shows "External authentication service rejected authentication due to invalid password or authentication restriction.")
Successful Connection but still "External authentication service rejected.." [message #149464] Sun, 07 March 2021 17:56 Go to next message
jcooper is currently offline  jcooper
Messages: 113
Registered: May 2009
Location: Syracuse, NY
Not sure what's going on, but when I connect from outlook (successfully) I am getting these entries in the security log

07/Mar/2021 11:46:53] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.
[07/Mar/2021 11:47:05] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.
[07/Mar/2021 11:47:12] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.
[07/Mar/2021 11:47:20] HTTP/EWS: Authentication failed for user jcooper<_at_>DOMAIN.COM. Attempt from IP address client.ip.address. External authentication service rejected authentication due to invalid password or authentication restriction.

I recently changed my password on the DC and updated my local settings to match obviously, but it's strange that it still authenticates, and that I seem to only get this from my EWS (outlook) connection. iPhone and Kerio webmail generate no errors.

Yet, the connection works and I CAN send/receive.

Authenticate to windows 2012r2 and 2016 DCs.

Thanks,

Jeff
Re: Successful Connection but still "External authentication service rejected.." [message #149475 is a reply to message #149464] Wed, 10 March 2021 01:44 Go to previous messageGo to next message
Nick.Geary is currently offline  Nick.Geary
Messages: 60
Registered: January 2021
Are you sure it's not a mobile device or other application attempting to authenticate? Another possibility is an issue of Clock offset. But I see you have an open support ticket, and we're in the process of gather more details on the environment.

https://support.kerioconnect.gfi.com/hc/en-us/articles/36001 5196339-Kerberos-Authentication-Failing-Because-of-Clock-Off set-Difference


Nick Geary
GFI Software
Re: Successful Connection but still "External authentication service rejected.." [message #149521 is a reply to message #149464] Tue, 23 March 2021 14:19 Go to previous message
jcooper is currently offline  jcooper
Messages: 113
Registered: May 2009
Location: Syracuse, NY
Turns out it was sort of an Apple thing. I did not realize that "EWS" applied not only to Outlook, but to accounts set up through MacOS's Internet Accounts System Preferences. Not sure why, but there was an Exchange account set up here with its own copy of my recently changed password, so THAT'S what was generating the error.

I have no idea how or when that got set up but I've turned it off.

Thanks,

Jeff
Previous Topic: Error 1911 When Installing / Upgrading Outlook Connector
Next Topic: Kerio Connect 9.3.1 Release Notes
Goto Forum:
  


Current Time: Tue Sep 27 16:29:32 CEST 2022

Total time taken to generate the page: 0.02586 seconds