This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Security Error in Standard AD SSO Mode

I've got everything working except for the Group Active Directory Users doesn't seem to recognize the users. If I add a user directly to the Allowed User/Groups they can get Internet Access. With Active Directory User they get blocked. I'm getting the error below pretty consistently in the log files.

2011:12:20-17:33:37 ALPILakeAlfred httpproxy[31443]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x9de4b88" function="adir_auth_process_negotiate" file="auth_adir.c" line="1184" message="gss_accept_sec_context: Key version number for principal in key table is incorrect"

Here is the block message with just Active Directory Users Group in the Allowed List.

2011:12:20-17:39:31 ALPILakeAlfred httpproxy[31443]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="172.16.12.64" dstip="" user="tuser" statuscode="403" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="REF_DefaultHTTPCFFBlockAction (Default content filter block action)" size="6481" request="0xadb81b8" url="www.alpi.org/" exceptions="" error=""

Any ideas as to why Web Security can see the Active Directory Users? In the Authentication tab when I test the user under servers it see the Active Directory Users as the group it belongs to.

Astaro ASG 220 running 8.203

This thread was automatically locked due to age.

Parents

0 BAlfson over 13 years ago

I don't recall ever seeing that first line - you might want to ask your reseller to open a case with Astaro Support. First, take a look at https://support.astaro.com/support/index.php/User_Contributed:HTTP/S_Proxy_Access_with_AD-SSO to see if there isn't something straightforward.

statuscode="403" - That's hard to figure out. What happens if you configure to avoid the Astaro Proxy on that site?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 13 years ago

I don't recall ever seeing that first line - you might want to ask your reseller to open a case with Astaro Support. First, take a look at https://support.astaro.com/support/index.php/User_Contributed:HTTP/S_Proxy_Access_with_AD-SSO to see if there isn't something straightforward.

statuscode="403" - That's hard to figure out. What happens if you configure to avoid the Astaro Proxy on that site?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data