Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 660 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help - AD SSO Auth failure.

Simon Shaw
We are using AD authorisation with SSO.

If I use Firefox, it works ok.

If I use IE, it fails, however, others are able to use SSO with IE OK, with the same browser settings.

I can authenticate OK to the portal.
2009:03:09-10:51:55 (none) aua[28882]: id="3004" severity="info" sys="System" sub="auth" name="Authentication successful" srcip="192.168.3.30" user="sss" caller="portal" engine="adirectory"

But not to web proxy:
2009:03:09-10:59:33 (none) httpproxy[20895]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="HEAD" srcip="192.168.3.30" user="sss" statuscode="407" cached="0" profile="profile_1" filteraction="" size="0" time="0 ms" request="0xad749d80" url="cr-tools.clients.google.com/.../check2
2009:03:09-10:59:33 (none) httpproxy[20895]: [0xad749d80] auth_adir_auth_crap_callback (auth_adir.c:739) Authorization denied (NT_STATUS_LOGON_FAILURE)

Any ideas?


This thread was automatically locked due to age.
Parents
  • 0
    Grr, OK I have found the problem is the client PC.

    I have tried clearing IE cache, clearing saved usernames and form data, password, whole cache etc etc etc without any luck, it just won't work on this client with IE.  (Firefox ok).

    Client = IE 7

    So, I'm about to format the PC and see how that goes.

    However, someone elses PC is exhibiting exactly the same issues, does anyone have experience with this same issue?  How can I get IE authenticating?  I have googled a lot, perhaps not enough.

    (On a clean XP install, IE works fine with the same username).[:S]
  • 0 in reply to Simon Shaw
    Do you have the same issue if logged onto this system as a different user?  If not, then there's a problem with the user profile.  Then you could just delete the profile and save the pain of a full reinstall.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
Reply Children