This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NTLM authentication

I have astaro v8 .103 configured with proxy transparent with authentication.
Until last Friday everything was working normally. Authentication was done with the windows (XP) user login (NTLM).
but, at night, the authentication stopped working. I Change DNS (astaro ipaddress with forwarding 8.8.8.8 - google dns) for some hours. Before, DNS was AD. Today, i change to AD again.
Now, i need put username and password every times on browser.
Does anyone have any idea what might be happening?

Server - windows 2008 server
3 groups (master, users, guest)
NTP Server sync on all workstations,AD Server and Astaro.
Workstations
Windows XP
Browsers: Firefox 3.6 and 4 and IE 8

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 14 years ago

Using transparent mode with authentication, the user SHOULD be prompted.  From the Admin Guide:

Transparent With Authentication: Use this mode to force users to authenticate while the proxy is working transparently. When users open a website for the first time, they will be presented an authentication user-portal-like webpage where they have to fill in username and password. This mode allows for username-based tracking, reporting, and surfing without client-side browser configuration. Moreover, you can enable a disclaimer that is additionally displayed on that dialog window and needs to be accepted by users to be able to go on. For more information on the disclaimer, please refer to chapter Management >> Customization >> HTTP/S Proxy. You can select or add users and/or groups to the Users/Groups text box who are to be allowed to use the proxy.

For the user to not be prompted at all, you would either need to use regular Transparent mode or SSO.  When 8.200 is released (probably next month), there will be another option that will require a software agent to be installed on each client system.  For more information on each of the modes and their limitations, when on the global tab of the http proxy in WebAdmin, click on the  blue button with the question mark inside at the upper right section of the page.

If users are being prompted every few minutes, that would lead me to believe that there may be a problem with the authentication cache database.  If this is the problem, then you should probably contact your reseller to start a support case with Astaro, or Astaro support directly if you have Premium support.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Scott_Klassen over 14 years ago

Using transparent mode with authentication, the user SHOULD be prompted.  From the Admin Guide:

Transparent With Authentication: Use this mode to force users to authenticate while the proxy is working transparently. When users open a website for the first time, they will be presented an authentication user-portal-like webpage where they have to fill in username and password. This mode allows for username-based tracking, reporting, and surfing without client-side browser configuration. Moreover, you can enable a disclaimer that is additionally displayed on that dialog window and needs to be accepted by users to be able to go on. For more information on the disclaimer, please refer to chapter Management >> Customization >> HTTP/S Proxy. You can select or add users and/or groups to the Users/Groups text box who are to be allowed to use the proxy.

For the user to not be prompted at all, you would either need to use regular Transparent mode or SSO.  When 8.200 is released (probably next month), there will be another option that will require a software agent to be installed on each client system.  For more information on each of the modes and their limitations, when on the global tab of the http proxy in WebAdmin, click on the  blue button with the question mark inside at the upper right section of the page.

If users are being prompted every few minutes, that would lead me to believe that there may be a problem with the authentication cache database.  If this is the problem, then you should probably contact your reseller to start a support case with Astaro, or Astaro support directly if you have Premium support.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data