This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD SSO in Windows Server 2008

We have a single Windows 2008 Terminal server configured for testing right now and it appears that AD SSO does not work on the 2008 server. I have scoured through the IE settings but have been unsuccessful in finding anything that works. I still get a pop-up asking me to authenticate to the proxy.

Has anyone had luck getting the SSO Proxy to work on a 2008 server?

We are running ASG v7.302

Thanks,
Mike

This thread was automatically locked due to age.

Parents

0 Jack Daniel over 17 years ago

Server 2008 AD SSO is not yet supported, Microsoft changed enough things to create some issues with Samba. If the AD server is in the backward compatability mode (I don't remember the MS terminology for this), you should be able to get it to work.
Cancel
Vote Up 0 Vote Down

Cancel
0 mierwins over 17 years ago in reply to Jack Daniel

The AD Server is still 2003, not 2008, so it must be a specific setting on how the 2008 server passes the information. Any idea where to start digging on the server side for this so called legacy mode?

--Mike
Cancel
Vote Up 0 Vote Down

Cancel
0 mierwins over 17 years ago in reply to mierwins

This does the trick!

http://blogs.techrepublic.com.com/networking/?p=577
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 17 years ago in reply to mierwins

Native mode 2008 Domains are now supported in the latest version of Samba (the module that allows Astaro to talk to Active Directory domain controllers)... I've been told the integration of the latest version of Samba is slated for a future "major" up2date release.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 17 years ago in reply to BrucekConvergent

An FYI, as per the article posted above with the "hack", if you do add one or more 2008 DC's, you must maintain at the 2003 functional level. If you move to 2008 functional level, your 2008 DCs will no longer be able to use NTLMv1.

Unfortunately this means that many of the cool new features of Server 2008, like multiple password policies, can't be used as they require 2008 functional level.

Hopefully the new Samba Bruce mentions will be integrated with Astaro sooner rather than later.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Scott_Klassen over 17 years ago in reply to BrucekConvergent

An FYI, as per the article posted above with the "hack", if you do add one or more 2008 DC's, you must maintain at the 2003 functional level. If you move to 2008 functional level, your 2008 DCs will no longer be able to use NTLMv1.

Unfortunately this means that many of the cool new features of Server 2008, like multiple password policies, can't be used as they require 2008 functional level.

Hopefully the new Samba Bruce mentions will be integrated with Astaro sooner rather than later.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data