Authentication Issue
|
Logged in as: Guest
|
|
Users viewing this topic:
none
|
|
Login  | |
|
Authentication Issue - 29.Sep.2009 4:53:05 PM
|
|
|
DanSpengeman
Posts: 4
Joined: 29.Sep.2009
Status: offline
|
Hello. We are running GFI MailArchiver 6.0, build 20081107.
We got word that users using the link we provided to the MailArchiver are getting a "Failed to authenticate" message. When you view the details, you get 401 error code.
The address we've given people is https://mail.(domain).com/mailarchiver. This is when we get prompted for credentials and no matter what, it says that it failed to authenticate. When we go from the outside using this same address, we get prompted for the password and can get right in. And if we use http://(server name)/mailarchiver, we aren't prompted for a password and all and we get right in.
Note: We are using this mail.(domain).com/mailarchiver link so that it works from both the inside and the outside (prevents users from using the wrong address to get in, depending on whether they're inside the network or out). This HAS worked in the past and there are three (or more) clients that are experiencing this issue.
Steps taken:
-Cleared out cache
-Checked that both mail.(domain).com and the server name are pointing to the same IP.
-Added host header record (no luck)
-Checked IIS config and nothing's changed
Again, this HAS worked and now all of a sudden it does not. I called GFI support and they are stumped. We may try an IIS reset after hours but is anyone else experiencing this? Having to make a bulk change to every user's Favorites/Links and have to direct them for one inside link & one outside link is a pain.
Thanks!
|
|
|
|
|
RE: Authentication Issue - 30.Sep.2009 6:24:28 AM
|
|
|
Encode
Posts: 113
Joined: 29.Jul.2008
Status: offline
|
Try opening the site in internet explorer and checking to see what security zone is listed on the bottom right of the browser. If accessing internally, it should say 'local intranet' so that it uses single sign on using your windows login (providing it's set that way under IE options, security zones, local intranet).
_____________________________
GFI Mail Archiver 6 Customer.
Running V6.1 (20090526) on Firebird.
Patches installed:
20090514_01
20090728_01
20090804_02
20090812_01
20090817_01
20090825_01
20090831_01
20090903_01
20090928_01
|
|
|
|
|
RE: Authentication Issue - 30.Sep.2009 9:48:05 AM
|
|
|
DanSpengeman
Posts: 4
Joined: 29.Sep.2009
Status: offline
|
Correct, it's displaying as "Local Intranet" for BOTH "http://(server name)/mailarchiver" and "https://mail.(domain).com/mailarchiver." Server name works, mail.(domain).com does not... We get the username/password credentials dialogue box that won't let us in regardless of the credentials we put in.
We re-called GFI to escalate this. Hopefully they/we come up with a solution quick.
|
|
|
|
|
RE: Authentication Issue - 1.Oct.2009 2:30:57 AM
|
|
|
Encode
Posts: 113
Joined: 29.Jul.2008
Status: offline
|
Could be an IIS issue, check http://support.microsoft.com/kb/326985 under 'Determine the server name'(be careful not to remove any existing spn's).
If GFI can't resolve for you, a support call into Microsoft may be required.
< Message edited by Encode -- 1.Oct.2009 2:37:23 AM >
_____________________________
GFI Mail Archiver 6 Customer.
Running V6.1 (20090526) on Firebird.
Patches installed:
20090514_01
20090728_01
20090804_02
20090812_01
20090817_01
20090825_01
20090831_01
20090903_01
20090928_01
|
|
|
|
|
RE: Authentication Issue - 5.Oct.2009 9:06:02 AM
|
|
|
DanSpengeman
Posts: 4
Joined: 29.Sep.2009
Status: offline
|
Hey Encode. We've tried your suggestion and will be rebooting the server tonight to see if that rectifies the issue. Fingers crossed that it works.
|
|
|
|
|
RE: Authentication Issue - 6.Oct.2009 2:30:13 PM
|
|
|
DanSpengeman
Posts: 4
Joined: 29.Sep.2009
Status: offline
|
Problem solved!
Encode's first reply was correct. The site MUST be ADDED to the Local Intranet group in IE. Even if it says "Local Intranet" when you go to access the site (which it did but wasn't checked to see if it was in the group), if it's not added it doesn't work/authenticate properly.
Whew... Glad that's over with! Now comes the matter of making this change to all client PCs... ;P
|
|
|
|
 New Messages |
 No New Messages |
 Hot Topic w/ New Messages |
 Hot Topic w/o New Messages |
 Locked w/ New Messages |
 Locked w/o New Messages |
|
 Post New Thread
Reply to Message
Post New Poll
Submit Vote
Delete My Own Post
Delete My Own Thread
Rate Posts |
|
|
Printable Version
