This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD Basic Auth works, SSO does not

I have Astaro 8.100 and I have managed to get basic authentication working with my AD setup. I wanted to go the last step and make everything SSO, but when I enable SSO, I cannot even open a web page, I get page cannot be displayed errors. If I bypass the proxy, or go back to basic auth, everything is fine. I don't see anything in the proxy logs when blocked, it is as if the system never even looks at the proxy in that mode. Any suggestions? Thanks for any responses.

This thread was automatically locked due to age.

0 mamarneh over 15 years ago

so what do you think ?????
i have checked the attachments you added and i have the same config as your's [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 gejosdotcom over 15 years ago

I think better to test the proxy without authentication.

Create new HTTP/S Profiles position on the top.

Source: your allow network for proxy (ie. 10.10.0.0/16)
Filter Assigments: blank (don't check any FA)
Fallback action: allow all address (create Filter Action with Allow by default).
Operation mode: Standard.

This for Profile for test the proxy with no auth (see fallback action). Make sure your browser proxy set also ( I think you did it [:)] )
Cancel
Vote Up 0 Vote Down

Cancel
0 mamarneh over 15 years ago

it is working in normal situations without any issues,this became a nightmare for me.huh !!!!!
what do you think we can do else???
Cancel
Vote Up 0 Vote Down

Cancel
0 gejosdotcom over 15 years ago

hmmm... I don't have any suggestion [:(]
Last checked... have you added more than 1 DC in SSO setting? If yes, try put only 1 DC server there. Maybe "timeout auth" while proxy try to check AD.
Cancel
Vote Up 0 Vote Down

Cancel
0 mamarneh over 15 years ago

i used only one DC too [:D]
this is strange..i guess it is the box problem not the AD or configuration issue [[:P]][[:P]]
Cancel
Vote Up 0 Vote Down

Cancel
0 gejosdotcom over 15 years ago

Maybe a silly sound [:P]
If you like to try another test... create new AD user (brand new user), and try again proxy with AD auth using that new user?
Cancel
Vote Up 0 Vote Down

Cancel