Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 1412 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problems with Active Directory SSO

SicurezzaBDB
Hello, we have an Astaro V7.502 and we use it for proxy and url filtering. We are using the proxy in basic user autentication mode with an Active Directory Backend Membership group pointing to our Active Directory (only the users of a specified A.D. Group can surf the internet) and all works fine. 

Then we tried to add the Active Directory SSO but we had some problems: with A.D.SSO active all users can navigate, not only the ones in the specified group. We have this problem only with the default proxy profile, instead all other HTTP/S Profiles work correctly even with A.D.SSO active.

Have you ever had a similar problem?
Thank you for your support!


This thread was automatically locked due to age.
Parents
  • 0
    In all of your backend group definitions, replace the Distinguished Name with just the content of the Common Name; utentiinternet instead of CN=utentiinternet,OU=Gruppi,...
    Then you can put the proxy back into AD-SSO mode and it should work fine.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    In all of your backend group definitions, replace the Distinguished Name with just the content of the Common Name; utentiinternet instead of CN=utentiinternet,OU=Gruppi,...
    Then you can put the proxy back into AD-SSO mode and it should work fine.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data