need correct authentication for Terminal-Server-Clients

Use this forum to post questions relating to WinGate, feature requests, technical or configuration problems

Moderator: Qbik Staff

need correct authentication for Terminal-Server-Clients

Postby Manni » Jan 22 04 1:03 pm

Hello,

is there any solution for the correct authentication of Terminal-Server-Clients with WinGate? I tried the java-method, but i got the same problems described by leedaniels in this forum http://forums.qbik.com/viewtopic.php?t=417&highlight=terminal+server Only the first session was correct authenticated. Unfortunately there was no success promising answer in this thread :-(

What ist the recommended way for authenticating TS-Users of WinGate? Can I use only WinGate-Accounts or NT-Accounts too? Is there any written introduction, whitepaper or so for authenticating WG-Users using the same Terminal Server? Or is WinGate not suitable for Terminal-Server-users?

Thanks in advance.

Greetings
Manni
Manni
 
Posts: 2
Joined: Oct 04 03 4:04 am

Postby adrien » Jan 22 04 1:19 pm

Hi

we need to do some work on WinGate to allow it to associate more than one logged in user with the same IP address. At the moment, the structure in WinGate assumes that anything coming from the same IP address is the same user, so the first user to authenticate means that all subsequent terminal server users are assumed to be the same user.

Prior to widespread use of Terminal server this wasn't a problem, but with TS setups, where all the users have the same IP, then there is an issue.

We are working on it, the solution will probably require the use of the WinGate Internet Client being installed on the Terminal Server, since this is the only remote authentication client that can perform NTLM authentication, although I am getting another idea. We are setting up a test scenario for this at the moment.

Adrien
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland

Postby Sid » Jan 22 04 8:56 pm

Because of the authentication problem I had a client who dropped Wingate. Why is it you do not have "popup dialog" authentication for the WWW and FTP proxys, simliar to what ISA server and Webmarshal use.
Many terminal server sites only require their users to have WWW and FTP access, so a proxy aauthentication would be suffice.
I would have thought this would be fairly easy to implement?

A terminal server 'aware' WGIC would probably suffice though.

Cheers
Sid
 
Posts: 15
Joined: Jan 19 04 10:10 pm

Postby Manni » Jan 23 04 7:08 am

Hello,

I think this is a _great_ disadvantage of WinGate and Qbik should correct this *soon*, because many SMEs use Terminal Servers with business apps or so. The most of this companies are possible WinGate-customers. And TS is interesting for integration of Linux-clients with existing windows-networks of any size.

Greetings
Manni
Manni
 
Posts: 2
Joined: Oct 04 03 4:04 am


Return to WinGate

Who is online

Users browsing this forum: Majestic-12 [Bot] and 8 guests

cron