This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active Directory Proxy Authentication

I'm having problems using AD authentication with the http proxy. Support says there must be a policy preventing ASG to look up groups in AD.

Already enabled "Network Access: Allowed Anonyms SID translation"

Anybody know of anything else I should do?

-Hamlet

This thread was automatically locked due to age.

0 NimmdirKeks over 19 years ago

Not without more information :-).

Normaly the AD connection works rather good and without problems.
Cancel
Vote Up 0 Vote Down

Cancel
0 Hamletv over 19 years ago in reply to NimmdirKeks

I think I found what else I needed to do. I enabled the policy that allows an annonymous user to get group listings from AD. I forgot what is the exact name, I'll post it later.

-Hamlet
Cancel
Vote Up 0 Vote Down

Cancel
0 NevesNET over 19 years ago in reply to Hamletv

I think I found what else I needed to do. I enabled the policy that allows an annonymous user to get group listings from AD. I forgot what is the exact name, I'll post it later.

-Hamlet

Did this resolve your issue? Which security setting did you change?

Domain Policy-> Computer Configuration-> Windows Settings-> Security Settings-> Security Options-> Network Access: Restrict anonymous access to Named Pipes and Shares-> Disabled

Does NOT solve my problem...
Cancel
Vote Up 0 Vote Down

Cancel
0 Mitch Miller over 19 years ago in reply to NevesNET

I cant even get the astaro to join my domain. I give it all the credentials and all I get is error joining domain. I do have the astaro controlling 4 different network subnets. Thats probably the reason. Its trying one network and not the one that has the domain controller. Any suggestions?
Cancel
Vote Up 0 Vote Down

Cancel
0 Mitch Miller over 19 years ago in reply to Mitch Miller

I finally got the astaro to join. Yep, took lots of changed policies.

Attached is the policies to be changed.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mitch Miller over 19 years ago in reply to Mitch Miller

So now that I got my astaro on the active directory, I have made the http_access group and 2 other groups. one for filterd one for unfilterd. everone is in http_access and I put the appropriate people in each other group. When I go to surf, I just get an astaro page that says permission denied. Any ideas?
Cancel
Vote Up 0 Vote Down

Cancel
0 JDYoung over 19 years ago in reply to Mitch Miller

Now you have to create a Profile Assignment and possibly a Cobion Profile in your HTTP Proxy.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mitch Miller over 19 years ago in reply to JDYoung

that has been done already. Still permission denied.
Cancel
Vote Up 0 Vote Down

Cancel
0 JDYoung over 19 years ago in reply to Mitch Miller

Try stopping and restarting your http proxy. Sometimes I have to do that when I add a new user.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mitch Miller over 19 years ago in reply to JDYoung

Still no go. I am going to reboot the whole astaro just to be sure. After this I am going to have to open a support ticket.
Cancel
Vote Up 0 Vote Down

Cancel