Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 684 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web filtering with AD SSO, issue viewing

System-Z
Not using transparent mode, using AD SSO

if we view this http://sdc.mcafee.com/ 

We get an error with this Authentication failed, but if we view this with ISA server we have no issues..

IE 8 and Firefox both do the samething.


This thread was automatically locked due to age.
  • 0
    Where is the error generated, on the Astaro, or on the website?  Could you give us a screenshot?  Is there anything relevant in the Content Filter log?
  • 0 in reply to Jack Daniel
    2010:06:07-13:55:18 DUSFPPASG01 httpproxy[29502]: id="0001" severity="info"
    sys="SecureWeb" sub="http" name="http access" action="pass" method="GET"
    srcip="10.57.245.142" user="rcave" statuscode="200" cached="0"
    profile="REF_VmBjFyCpva (Everpack Standard)" filteraction="REF_LsRWMRbFss
    (Proxy - Access Level 2)" size="0" time="275 ms" request="0xb1804718"
    url="sdc.mcafee.com/njs.gif" exceptions="" error=""
    category="105,175" reputation="trusted"
    categoryname="Business,Software/Hardware"

    2010:06:07-13:55:19 DUSFPPASG01 httpproxy[29502]: id="0001" severity="info"
    sys="SecureWeb" sub="http" name="http access" action="pass" method="GET"
    srcip="10.57.245.142" user="rcave" statuscode="407" cached="0"
    profile="REF_VmBjFyCpva (Everpack Standard)" filteraction="REF_LsRWMRbFss
    (Proxy - Access Level 2)" size="0" time="273 ms" request="0xb184a0a0"
    url="sdc.mcafee.com/njs.gif" exceptions="" error=""
    category="105,175" reputation="trusted"
    categoryname="Business,Software/Hardware"

    2010:06:07-13:55:19 DUSFPPASG01 httpproxy[29502]: [0xb180a770]
    auth_adir_auth_crap_callback (auth_adir.c:875) Authorization denied
    (NT_STATUS_WRONG_PASSWORD)
  • 0
    Odd, but "...crap_callback" and "...WRONG_PASSWORD" are pretty clear.  I assume that is an update server which you trust, so adding it to the proxy skiplist in the client browser may be the best quick fix.  (or at least a good diagnostic step)