ja, thinking it might be some kind of weird secure channel issue, but the fact that the user can authenticate kind of clouds the issue.