Authentication Issue (Full Version)

All Forums >> [Archiving & Fax] >> GFI MailArchiver



Message

DanSpengeman -> Authentication Issue (29.Sep.2009 4:53:05 PM)

Hello.  We are running GFI MailArchiver 6.0, build 20081107.

We got word that users using the link we provided to the MailArchiver are getting a "Failed to authenticate" message.  When you view the details, you get 401 error code.

The address we've given people is https://mail.(domain).com/mailarchiver.  This is when we get prompted for credentials and no matter what, it says that it failed to authenticate.  When we go from the outside using this same address, we get prompted for the password and can get right in.  And if we use http://(server name)/mailarchiver, we aren't prompted for a password and all and we get right in.

Note: We are using this mail.(domain).com/mailarchiver link so that it works from both the inside and the outside (prevents users from using the wrong address to get in, depending on whether they're inside the network or out).  This HAS worked in the past and there are three (or more) clients that are experiencing this issue.

Steps taken:
-Cleared out cache
-Checked that both mail.(domain).com and the server name are pointing to the same IP.
-Added host header record (no luck)
-Checked IIS config and nothing's changed

Again, this HAS worked and now all of a sudden it does not.  I called GFI support and they are stumped.  We may try an IIS reset after hours but is anyone else experiencing this?  Having to make a bulk change to every user's Favorites/Links and have to direct them for one inside link & one outside link is a pain.

Thanks!



Encode -> RE: Authentication Issue (30.Sep.2009 6:24:28 AM)

Try opening the site in internet explorer and checking to see what security zone is listed on the bottom right of the browser. If accessing internally, it should say 'local intranet' so that it uses single sign on using your windows login (providing it's set that way under IE options, security zones, local intranet).



DanSpengeman -> RE: Authentication Issue (30.Sep.2009 9:48:05 AM)

Correct, it's displaying as "Local Intranet" for BOTH "http://(server name)/mailarchiver" and "https://mail.(domain).com/mailarchiver."  Server name works, mail.(domain).com does not... We get the username/password credentials dialogue box that won't let us in regardless of the credentials we put in.

We re-called GFI to escalate this.  Hopefully they/we come up with a solution quick.



Encode -> RE: Authentication Issue (1.Oct.2009 2:30:57 AM)

Could be an IIS issue, check http://support.microsoft.com/kb/326985 under 'Determine the server name'(be careful not to remove any existing spn's).

If GFI can't resolve for you, a support call into Microsoft may be required.



DanSpengeman -> RE: Authentication Issue (5.Oct.2009 9:06:02 AM)

Hey Encode.  We've tried your suggestion and will be rebooting the server tonight to see if that rectifies the issue.  Fingers crossed that it works.



DanSpengeman -> RE: Authentication Issue (6.Oct.2009 2:30:13 PM)

Problem solved! 

Encode's first reply was correct.  The site MUST be ADDED to the Local Intranet group in IE.  Even if it says "Local Intranet" when you go to access the site (which it did but wasn't checked to see if it was in the group), if it's not added it doesn't work/authenticate properly.

Whew... Glad that's over with!  Now comes the matter of making this change to all client PCs...  ;P



Page: [1]