Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 1402 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Ad-sso

FunnyDingo
Hello,

I think it's small problem, but I can see the solution :-(

I've configured my ASG (v7) with 2 adirectory backends (DomainA and DomainB), made astaro a member of DomainA, set proxy authentication to AD-SSO and added a group to the allowed groups list.

But users wich are not member of this group can access the web. If I take a look into the authentification live log, I see only the test request from the adirectory server test dialog.

I've no idea how to find the problem. Any hint?

Kind regards,
Funny


This thread was automatically locked due to age.
Parents
  • 0
    Sounds good, but didn't help... My Test user can surf anyway 

    2012:09:25-16:04:33 astaro httpproxy[18896]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="x.x.x.x" user="test" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="24646" time="124 ms" request="0xb1620590" url="www.google.de/.../html"


    Maybe I've missconfigured something? E.g. the group: The "group selector" inserted the DN, but somewhere I read, that the group name is correct and that this is a small bug, is it?
Reply
  • 0
    Sounds good, but didn't help... My Test user can surf anyway 

    2012:09:25-16:04:33 astaro httpproxy[18896]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="x.x.x.x" user="test" statuscode="200" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="24646" time="124 ms" request="0xb1620590" url="www.google.de/.../html"


    Maybe I've missconfigured something? E.g. the group: The "group selector" inserted the DN, but somewhere I read, that the group name is correct and that this is a small bug, is it?
Children
No Data