up vote 0 down vote favorite
share [g+] share [fb]

I have a 'sandbox' domain and I am experimenting with different forms of authentication. I have the following three machines in my network: Forefront TMG, IIS Web Server, ADDS. Outside of the domain I have a laptop that I am using as a client to test access over the 'Internet'.

I have published a web service over https to authenticate at Forefront using SSL Client Certificate Authentication. The client certificate is installed on the laptop and also mapped to a domain user in AD. The certificate root is trusted in 'Local Computer' on all machines in the domain. The publishing rule uses kerberos to forward the authenticated user to IIS and the web service is hosted using Windows Authentication.

The client certificate is issued from StartSSL. The domain certificates were created in IIS and signed internally.

Connecting from a browser on the laptop I am requested to select the certificate, then it says the site is not trusted but I can continue (not recommended). I continue and it asks me to select a certificate a second time. Then it returns the following error:

Error Code: 500 Internal server error. The server denied the specified URL. Contact the server administrator (12202)

Can anyone offer clues?

link|improve this question
Can you add a snapshot of the configuration of the listerner and of all the tabs of the publishing rule? I particullary interested in the domains tab but would be great if you post all. – Ricardo Polo Oct 19 '11 at 12:36
I have prepared two images with all the settings in but I don't see anywhere to attach them to this post. – Michael Oct 19 '11 at 14:23
you dont have enought privileges in this website to upload images. In the time you will get it. While now, please post the snapshots using the urls of imageshack.us – Ricardo Polo Oct 19 '11 at 14:55
Here is the Web Publishing Rule and this is the Web Listener – Michael Oct 19 '11 at 19:16
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.