 Automatic Login redirection not working with 8.5 [message #119522] |
Thu, 19 February 2015 09:49  |
awpross
Messages: 2
Registered: October 2014
Location: Deutschland
|
|
|
|
We just updated to version 8.5. Now the redirection to the login page is not working any more.
Before the Update:
1. User opens a website which requires login.
2. User is automatically redirected to login page and due to NTLM he is automatically logged in and redirected to the website.
After the Update to 8.5:
1. User opens a website which requires login.
2. User geht's a Message "Access Denied"
3. User can click on "Anmeldeseite" ("Login") on the bottom of the "Access Denied" Page
4. User is now automatically logged in with NTLM and is redireted to the desired webpage
As you can see, this requires some additional steps to complete thje login process which wasn't required prior to 8.5
Is this a bug?? How to restore the old behaviour??
[Updated on: Thu, 19 February 2015 09:50] Report message to a moderator |
|
|
|
|
|
|
|
|
|
|
|
| Re: Automatic Login redirection not working with 8.5 [message #119625 is a reply to message #119619] |
Tue, 24 February 2015 11:54  |
luca.civinini@ctt
Messages: 14
Registered: September 2009
Location: System Administrator
|
|
|
|
This is my configuration:
1) Kerio control joined to an AD2008 Domain (but I think AD version is not important)
2) Traffic rule allowing access from any trusted interface to the internet using FTP and HTTP with default protocol inspection
3) Content filter rules:
1. Rule to allow unauthenticated access to some sites
2. Tule to allow internet access from user belonging to a specific AD Group
3. Deny rule with a warning message ("please call IT Support to get Internet access")
4. the built-in allow rule
Before upgrading to 8.5 users were redirected to the automatic login page and, after login, redirected to the requested page.
Now users are getting the page "Please call IT support to get Internet Access" followed by LOGIN button. If they press LOGIN they are correctly authenticated.
Using Google Chrome as well as IE as browser (no firefox here by policy).
Am I missing something in my config?
Thanks
|
|
|
|
|
|
|
|
|
|
| Re: Automatic Login redirection not working with 8.5 [message #119653 is a reply to message #119649] |
Wed, 25 February 2015 08:57 |
Dmitry Ignatenko
Messages: 2
Registered: February 2015
|
|
|
|
Enable debug authentication.
If connect through a proxy:
[25/Feb/2015 10:14:37] {auth} NTLM successfully authenticated user d.ignatenko<_at_>vrgaz.ru
[25/Feb/2015 10:14:37] {auth} User D.Ignatenko<_at_>vrgaz.ru authenticated from 10.4.136.31 using NTLM
[25/Feb/2015 10:14:58] {auth} Krb5: entering auth (user: D.Ignatenko<_at_>VRGAZ.RU)
[25/Feb/2015 10:14:59] {auth} Krb5: user D.Ignatenko<_at_>VRGAZ.RU authenticated.
[25/Feb/2015 10:14:59] {auth} Krb5: user D.Ignatenko authenticated.
If connect through a NAT:
Log empty, but im access to the Internet
|
|
|
|
| Re: Automatic Login redirection not working with 8.5 [message #119660 is a reply to message #119649] |
Wed, 25 February 2015 18:17 |
luca.civinini@ctt
Messages: 14
Registered: September 2009
Location: System Administrator
|
|
|
|
Hello,
attached some info about my rules.
Please note that NTLM in itself works. What is missing is the AUTOMATIC REDIRECTION to the login page (the page which says "Redirecting to login page, please wait a few seconds... If you are not redirected, click on this link")
Here is the authentication debug part:
[25/Feb/2015 18:07:44] {http_handler} [ 141952 ] connect to www.symantec.com
[25/Feb/2015 18:07:44] {http_handler} [ 141952 ] connection established
[25/Feb/2015 18:07:44] {http_handler} [ 141952 ] response: HTTP/1.1 301 Moved Permanently
[25/Feb/2015 18:07:44] {http_handler} [ 141952 ] User not found for IP 192.168.xxx.yyyy in url_check()
[25/Feb/2015 18:07:44] {http_handler} [ 141952 ] URL not categorized, webfilter is not activated or guest traffic.
[25/Feb/2015 18:07:44] {http_handler} [ 141952 ] DENY content rule '[auth] Deny access with warning' GET http://www.symantec.com/
[25/Feb/2015 18:07:44] {http_handler} [ 141952 ] redirecting to /nonauth/deny.php
Then this is the part when I click the "login button"
[25/Feb/2015 18:08:06] {auth} empty NT domain name, user found in my_domain.fqdn
[25/Feb/2015 18:08:06] {auth} user lookup: my_user<_at_>my_domain.fqdn
[25/Feb/2015 18:08:06] {auth} NTLM successfully authenticated user my_user<_at_>my_domain.fqdn
[25/Feb/2015 18:08:06] {auth} User my_user<_at_>my_domain.fqdn authenticated from 192.168.xxx.yyyy using NTLM
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] New request 192.168.xxx.yyyy:2947 -> 23.223.67.127:80
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] Found user my_user<_at_>my_domain.fqdn for IP 192.168.xxx.yyyy in request_read_header()
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] Found user my_user<_at_>my_domain.fqdn for IP 192.168.xxx.yyyy in url_check()
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] URL not categorized, webfilter is not activated or guest traffic.
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] URL rules need content check.
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] request /
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] connect to www.symantec.com
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] connection established
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] response: HTTP/1.1 301 Moved Permanently
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] Found user my_user<_at_>my_domain.fqdn for IP 192.168.xxx.yyyy in url_check()
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] URL not categorized, webfilter is not activated or guest traffic.
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] ALLOW content rule '[auth] Authenticated Internet access' GET http://www.symantec.com/
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] persisting connection; server count: 1, client count: 1
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] Found user my_user<_at_>my_domain.fqdn for IP 192.168.xxx.yyyy in request_read_header()
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] Found user my_user<_at_>my_domain.fqdn for IP 192.168.xxx.yyyy in url_check()
[25/Feb/2015 18:08:06] {http_handler} [ 141953 ] URL not categorized, webfilter is not activated or guest traffic. |
|
|
|
|
|
|
|
|
|
|
|
Members
Search
Help
Register
Login
Home
