Microsoft KB Archive/177063

= Error 12201: "proxy-to-proxy authentication" =

Article ID: 177063

Article Last Modified on 1/16/2007

-

APPLIES TO


 * Microsoft Proxy Server 2.0 Standard Edition

-



This article was previously published under Q177063



SYMPTOMS
When you chain or array the Microsoft Proxy Server version 2.0 servers, you may receive the following error message:

Error 12201 A chained proxy server or array member requires proxy-to-proxy authentication. Please contact your server administrator.



CAUSE
This error occurs when Encrypted (Microsoft Windows NT Challenge/Response) authentication is used to send credentials to the upstream proxy server or array when anonymous access is allowed on the proxy servers.

Note This authentication option is set in the Web Proxy Service properties. To set the option, select Routing, select Upstream Routing, and then select Use Credentials to Communicate with Upstream Proxy Array.



RESOLUTION
To resolve this problem, disable anonymous authentication in the Microsoft Internet Information Server (IIS) WWW Service properties on the proxy servers that participate in the chain or array. To do this, select Windows NT Challenge/Response authentication (enabled).

If you are concerned about security on your intranet, you can use Basic authentication together with Secure Sockets Layer (SSL) encryption. However, when you do this, all transmissions are encrypted. Therefore, this method has a significant effect on the performance of the server.

Keywords: kbfaq KB177063

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.