Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 5727 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ie proxy setting with fqdn not working - ip address ok

quartino
Hi,
we're using an AD SSO profile, on the browser we setup the proxy settings using astaro.domain.com at port 8080.
Now the problem is that some clients get an authentication problem, to solve this problem we need to change the browser settings with the ip address instead of the astaro fqdn this even if the fqdn is resolved correctly.
Any idea what could be the cause?
Thank you [:)]
Andy


This thread was automatically locked due to age.
Parents
  • 0
    OK, I'll check if see some blocks on the ips.
    thank you.
  • 0 in reply to quartino
    Kerberos authentication  failures are often caused by local computer an kerberos server time mismatches.  Make sure the timezone settings and local times are set correctly on all servers and PCs.  Also make sure that they are all closely synced time-wise; I believe if the time is more than 15 minutes off (at least on windows systems) you will have problems.  These settings can be adjusted via GPO, but I'd just make sure that all the boxes (including the astaro) are syncing up via NTP.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to quartino
    Kerberos authentication  failures are often caused by local computer an kerberos server time mismatches.  Make sure the timezone settings and local times are set correctly on all servers and PCs.  Also make sure that they are all closely synced time-wise; I believe if the time is more than 15 minutes off (at least on windows systems) you will have problems.  These settings can be adjusted via GPO, but I'd just make sure that all the boxes (including the astaro) are syncing up via NTP.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data