Intouch Access Anywhere Login error

Hello,

We have activated RDS features and roles, deployed the RDS and added Viewer in Collection.

We are using Intouch Unlimited perpetual License which includes Intouch HMI Server with unlimited RDS Clients.

We can call Access anywhere from a client computer via browser with the address Servername:8080. The login page opens. We can put our username with domain (TR\extTuncer) and password. The projects in Intouch Server are already listed and we select the related project which is already running on server.

When we try to connect we get the fault "Your Username or Password are either incorrect or expired. If this problem persists, please contact your system administrator _ (error 0x % 1)"

When I check the logs of access anywhere I see below logs:

25/01/01 17:32:04.973 | 20340 | [CFG] GET: [SERVER Side]FallbackDisconnectTimeoutSeconds=3
25/01/01 17:32:04.977 | 20340 | [CFG] GET: [SERVER Side]SmallReceiveSizeKB=100
25/01/01 17:32:04.978 | 20340 | [CFG] GET: [General]AcceleratorCallsAndCallbacksMode=Safe
25/01/01 17:32:04.978 | 20340 | [CFG] GET: [General]MiniDumpVersioning=<Default>
25/01/01 17:32:04.978 | 20340 | [CFG] GET: [General]EnableAccelerationChannelStatistics=False
25/01/01 17:32:04.978 | 20340 | [SESSION] Session #3 created from visitor #7
| Protocol: ericom|accessnow.3
| Client -> Server
| Local Address : 10.93.170.135:8080
| Remote Address : 10.93.170.135:63462
| Server -> Client
| Local Address : 10.93.170.135:63463
| Remote Address : 10.93.170.135:3389
| Active sessions: 1 (top=1)
25/01/01 17:32:05.049 | 21704 | Hello from client: AccessNow 10.0.0.64094 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
25/01/01 17:32:05.161 | 21704 | TB license is used for this session.
25/01/01 17:32:07.485 | 20340 | *** ERROR *** [S2019]
| Buffer OnCompletionFailed #5, #995.
25/01/01 17:32:07.986 | 21704 | [SESSION] Session #3 terminated by CLIENT. Elapsed time: 00:03.013 Active sessions: 0 (top=1)
25/01/01 17:32:17.628 | 20340 | [CFG] GET: [SERVER Side]FallbackDisconnectTimeoutSeconds=3
25/01/01 17:32:17.630 | 20340 | [CFG] GET: [SERVER Side]SmallReceiveSizeKB=100
25/01/01 17:32:17.630 | 20340 | [CFG] GET: [General]AcceleratorCallsAndCallbacksMode=Safe
25/01/01 17:32:17.630 | 20340 | [CFG] GET: [General]MiniDumpVersioning=<Default>
25/01/01 17:32:17.631 | 20340 | [CFG] GET: [General]EnableAccelerationChannelStatistics=False
25/01/01 17:32:17.631 | 20340 | [SESSION] Session #4 created from visitor #8
| Protocol: ericom|accessnow.3
| Client -> Server
| Local Address : 10.93.170.135:8080
| Remote Address : 10.93.170.135:63489
| Server -> Client
| Local Address : 10.93.170.135:63490
| Remote Address : 10.93.170.135:3389
| Active sessions: 1 (top=1)
25/01/01 17:32:17.683 | 20340 | Hello from client: AccessNow 10.0.0.64094 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0
25/01/01 17:32:17.693 | 20340 | TB license is used for this session.
25/01/01 17:32:17.707 | 12028 | *** ERROR *** [S23157]
| unexpected pubKeyAuth buffer size:0
| Session : #4
| Location: C:\agent\_work\3\s\Blaze3\Code\Blaze\RDP\libfreerdp\core\nla.c(752)
25/01/01 17:32:17.718 | 12028 | *** ERROR *** [S23157]
| Could not verify public key echo!(0x80090308)
| Session : #4
| Location: C:\agent\_work\3\s\Blaze3\Code\Blaze\RDP\libfreerdp\core\nla.c(368)
25/01/01 17:32:46.779 | 20340 | *** ERROR *** [S2019]
| Buffer OnCompletionFailed #5, #995.
25/01/01 17:32:47.280 | 20340 | [SESSION] Session #4 terminated by CLIENT. Elapsed time: 00:29.652 Active sessions: 0 (top=1)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Below is the security setting of Access Anywhere:

In the document I saw that certificate thumbprint should be updated with the one installed. I copied the thumbprint and applied here.

I couldn't solve the issue and I am stuck. 

Thanks in advance for any suggestion.

Parents
  • Hi, this error could be related to the NTLM policys in your domain. I dont remember the name of the policy at the moment, but have a look in Local Policys -> Security Options on the machine running access anywhere server and the domain controller(s). 

  • I just checked.

    "Network security: Restrict NTLM: Incoming NTLM traffic

    This policy setting allows you to deny or allow incoming NTLM traffic.

    If you select "Allow all" or do not configure this policy setting, the server will allow all NTLM authentication requests."

    since in my case it is not configured it should allow all traffic.

  • I see. I just wanted to mention it since I had the same problem in our system. After enabling auditing for NTLM we could see that we got "Audit Failure" events in the windows event log, the events was about failed NTLM authentications from the user which was trying to log in to the access anywhere server.

    The reason was that the IT department had deployed security enhancing GPO's to the domain controllers and servers in the domain, and the GPO's disabled NTLM authentication.

    Hope the information can get you on your way to a solution, there are probably many security policies that can prevent machines from doing authentication in a domain environment.

Reply
  • I see. I just wanted to mention it since I had the same problem in our system. After enabling auditing for NTLM we could see that we got "Audit Failure" events in the windows event log, the events was about failed NTLM authentications from the user which was trying to log in to the access anywhere server.

    The reason was that the IT department had deployed security enhancing GPO's to the domain controllers and servers in the domain, and the GPO's disabled NTLM authentication.

    Hope the information can get you on your way to a solution, there are probably many security policies that can prevent machines from doing authentication in a domain environment.

Children