 Authentications Problems (Active directory NTLM) [message #115881] |
Wed, 03 September 2014 19:22  |
deftoner
Messages: 5
Registered: January 2005
|
|
|
|
Hi everybody, thanks for your time on reading this post.
I have the lastest kerio control (8.3.4 build 2461), joined to Active Directory domain.
Everything there is ok, I see the users. The automatic log on NTLM is working BUT:
- I had some computers on the network that aren't part of the domain, so I want it to login "by hand"
- The Login screen of kerio control is shown perfectly, first an apache like login appear, when I enter the user then redirected to servername.domain.com an Kerio login screen appear. The URL is:
https://servername.domain.com:4081/login/?orig=XXXXXXXXXXXXX XXXXXXX%3D&dest=XXXXXXXXXXXXXXXXXXXXX%3D%3D&host=XXX XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX&NTLM=0
- I try any user an fail the login, BUT if I modify the url by hand to: https://servername.domain.com:4081/login/ its automaticly login (I guess using the credentials previously entered on the apache like windows) or by modifying the url and changing NTLM=0 to NTLM=1
So I guess that kerio try to autenticate local user and not using the list of users from domain.
So IF the problem is that kerio try to use local base, there is any method to use Domain users by default?
Any idea?
As second problem (but less important) I cant conect to admin console using active directory users (regardless if I put as admin or not on kerio), I got to create local users for administracion (not big deal for that)
Thanks again for the time on reading this.
Hope you have a nice day.
PD: Just in case, I have 6 building with kerio control + vpn and I'm upgrading from the old windows version to the stand alone (linux), and forcing users to be loged to navigate for security reasons, this is the first building that I Upgraded
|
|
|
|
|
|
| Re: Authentications Problems (Active directory NTLM) [message #116368 is a reply to message #115937] |
Sat, 27 September 2014 02:38  |
exportgoldman
Messages: 14
Registered: February 2009
|
|
|
|
We have the same problem, and have been playing around with the settings for the last month. Running latest release of Kerio on a rack mount appliance box.
Cannot get the captive portal to be captive, so no redirects at all browsing if your not logged in.
We have it to the stage now where if we put NTLM=1 on the URL with the correct IE security settings it will auto logon.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Re: Authentications Problems (Active directory NTLM) [message #116999 is a reply to message #116998] |
Sat, 25 October 2014 16:30 |
miyzfrider
Messages: 12
Registered: July 2011
|
|
|
|
I downgraded back to 8.3.4 build 2461 and NTLM is working just fine again. I reached out to tech support and was basically told it was likely my configuration must be incorrect. Not sure how that conclusion can be reached when it worked fine before updating to 8.4, then after upgrading it stopped working, now it works fine again after downgrading to 8.3.4. There has to be something in the authentication function that has changed. Hopefully they will look further into it and find a solution. Till then, we'll stay on 8.3.4.
[Updated on: Sat, 25 October 2014 16:32] Report message to a moderator |
|
|
|
|
|
|
|
| Re: Authentications Problems (Active directory NTLM) [message #117064 is a reply to message #117017] |
Tue, 28 October 2014 13:23 |
miyzfrider
Messages: 12
Registered: July 2011
|
|
|
|
Just a comment to everyone reading this thread and also experiencing NTLM issues after upgrading...it appears that NTLM authentication may not have been working correctly, or at least as Kerio thought, in prior versions. We didn't have to set the browser settings mentioned in the KB article referenced above to have NTLM work, with the exception of Firefox. But we never went into IE settings like described in the article and NTLM authentication worked fine. Now, after the upgrade, even after making the setting adjustments in IE, NTLM does not work. It does work in Firefox however if you add the Kerio machine FQDM to the appropriate setting referenced in the KB article, at least on our network.
I will reach back out to Kerio tech support as this definitely seems to be something in the new version.
I'll post back if I hear anything.
[Updated on: Tue, 28 October 2014 13:56] Report message to a moderator |
|
|
|
|
|
|
|
|
|
Members
Search
Help
Register
Login
Home
in 8.4.0
