FIX: "You could not be logged on to Forefront TMG" error message when you try to log on to a published website after a domain name is not provided in the authentication settings for LDAP servers in the New Web Publishing Rule Wizard

Symptoms

Consider the following scenario:

You create a web publishing rule by using the New Web Publishing Rule Wizard.
In the Authentication Settings options, you set the following settings:
- HTML Form Authentication
- LDAP (Active Directory)
In the LDAP Servers options, you add the fully qualified domain name (FQDN) of a global catalog server. Then, you leave the Type the Active Directory domain name (use the fully-qualified domain name) setting blank.
In the Authentication Delegation option, you select Basic authentication.
When you access the web server that TMG published, you provide the user name without the domain prefix, and you provide the password.

In this scenario, when you try to log on to the published website, you cannot log on. Additionally, you receive the following error message:

You could not be logged on to Forefront TMG. Make sure that your domain name, user name, and password are correct, and then try again.

To resolve this problem, install the service pack that is described in the following Microsoft Knowledge Base article:

2555840 Description of Service Pack 2 for Microsoft Forefront Threat Management Gateway 2010

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Keywords: kbfix, kbbug, kbexpertiseinter, kbsurveynew, kb

Article Info