Active Directory-Make User names appear in Activity Monitor

Use this forum to post questions relating to WinGate, feature requests, technical or configuration problems

Moderator: Qbik Staff

Active Directory-Make User names appear in Activity Monitor

Postby vicky » Aug 18 14 11:35 pm

Hi,

We have Wingate 8 installed on in svr 2003.
In Users and Groups, we used the active directory integration module.

The wingate has 2 network cards and sitting between our adsl router and core switch.The wingate is both our proxy and firewall.

The wingate machine is a joined to the corporate domain.

In activity monitor, we can some of the computer names appearing but we want the usernames to appear instead.

Is there a way to really accomplish this without using "assume users" ?

Please provide the step by step procedures.

Thanks.
Vicky
vicky
 
Posts: 4
Joined: Aug 18 14 11:24 pm

Re: Active Directory-Make User names appear in Activity Moni

Postby adrien » Aug 20 14 5:44 pm

Hi

for WinGate to learn user names, there are only 2 options: use assumed user credential rules, or require users to authenticate.

I'd recommend watching this video. https://www.youtube.com/watch?v=OTZYImHBmJY&list=UUNrqTABiLTk52gGAftNvrhQ

Regards

Adrien
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland

Re: Active Directory-Make User names appear in Activity Moni

Postby vicky » Aug 21 14 12:02 am

adrien wrote:Hi

for WinGate to learn user names, there are only 2 options: use assumed user credential rules, or require users to authenticate.

I'd recommend watching this video. https://www.youtube.com/watch?v=OTZYImHBmJY&list=UUNrqTABiLTk52gGAftNvrhQ

Regards

Adrien


Since we are using active directory integration, the users must authenticate again ?

Regarding video, its not loading correctly, i dont know for what reason.

Please send some screenshots or the exact steps required to get this working

thanks
vicky
 
Posts: 4
Joined: Aug 18 14 11:24 pm

Re: Active Directory-Make User names appear in Activity Moni

Postby adrien » Aug 21 14 12:08 am

Hi

the authentication happens automatically, so users don't have to re-type passwords.

There are a couple of basic steps:

1. Client browsers must be configured to use the proxy (rather than not configured to use a proxy and just intercepted at the proxy)

2. The web rule. To get authentication, the web rule that grants access needs to require that the matching user not be Everyone. In other words, it must require knowledge of the user. This causes the rule to issue authentication challenges to un-authenticated requests, which is how authentication works (request -> response with auth challenge -> request with auth response etc)

Can you see our channel? You may be able to pick up the video from there

https://www.youtube.com/user/qbiknzltd

Regards

Adrien de Croy
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland

Re: Active Directory-Make User names appear in Activity Moni

Postby vicky » Aug 21 14 7:50 pm

Ok Thanks.

How we do assume users when using the Active Directory Integration ?

Please just give me the steps.

Thanks.
vicky
 
Posts: 4
Joined: Aug 18 14 11:24 pm

Re: Active Directory-Make User names appear in Activity Moni

Postby vicky » Aug 21 14 8:01 pm

another question:
we are planning to connect an access point for Guests wifi. since, we are using the active directory integration and the guests are not in the Active Directory users.. will it be possible to authenticate the guests on wingate?
vicky
 
Posts: 4
Joined: Aug 18 14 11:24 pm

Re: Active Directory-Make User names appear in Activity Moni

Postby adrien » Aug 27 14 10:21 am

to assume users, you use the credential rules. Create a rule which matches on e.g. IP (IP is most reliable), where it assumes a user account.
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland

Re: Active Directory-Make User names appear in Activity Moni

Postby adrien » Aug 27 14 10:22 am

auth takes a username and password, so if you don't want to dish out user/pass to your guest users, they can't auth.

But if you use a separate subnet for the Wifi, you can create a single credential rule to assume the whole subnet is a particular account.
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland


Return to WinGate

Who is online

Users browsing this forum: No registered users and 10 guests