Trial Version and NTLM authentication

Use this forum to post questions relating to WinGate, feature requests, technical or configuration problems

Moderator: Qbik Staff

Trial Version and NTLM authentication

Postby Toowoombah » Apr 12 05 2:39 pm

What version of Wingate is the trial download?
I have installed the trial but whenever I set "User must be authenticated" in the policies for WWW proxy then I get a User Authentication failed.
If I set User may be unknown then everyone comes through as Guest

Extra info:
Server 2003 standard
Wingate 6.0.3 (trial)
Using AD user database


Regards
Gavin
Toowoombah
 
Posts: 4
Joined: Apr 12 05 2:30 pm

Postby adrien » Apr 12 05 5:23 pm

The trial download is the same as the licensed version, the trial is handled by a limited time activation.

So NTLM is enabled for trials (which are the same as an unlimited Enterprise key).

How are your users configured to connect to the proxy? By direct connection to proxy, or using the proxy machine as their TCP/IP default gateway and having connections intercepted?

Also, which browser are you using?

Adrien
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland

Postby adrien » Apr 12 05 5:24 pm

Also, for using a remote NT user database, then the WinGate service needs to be run in the context of a valid account on the Active Directory server, rather than the normal LocalSystem account.

Adrien
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland

Postby Toowoombah » Apr 12 05 5:47 pm

They connect using the proxy settings in IE.
I have set the Wingate service to logon with the Administrator account

Gavin
Toowoombah
 
Posts: 4
Joined: Apr 12 05 2:30 pm

Postby Toowoombah » May 03 05 1:34 pm

Mattp

I see in this thread reply you talk about using the WGIC.
http://forums.qbik.com/viewtopic.php?t=3444
Does that mean that without the WGIC installed the NTLM authentication will not work and users will get the "User Authentication Failure" error ?

Gavin
Toowoombah
 
Posts: 4
Joined: Apr 12 05 2:30 pm

Postby MattP » May 03 05 1:53 pm

Hi Gavin,

No, authentication will work fine without the WGIC.

How are your clients authenticating? On the general tab of the WWW proxy you can set the authentication options, which did you choose? If you're using the WinGate database you can choose between Java or basic, if you're using the OS database then you'll see NTLM or basic.

If you don't choose anything then you must use a different method of authentication, either the WGIC or GateKeeper (where each client has a copy of the GateKeeper.exe on their desktop and they double click this and log in to the remote WinGate server to authenticate)

Which user database are you using?
MattP
Qbik Staff
 
Posts: 991
Joined: Sep 08 03 4:30 pm

Postby Toowoombah » May 03 05 3:57 pm

Matt

They are using NTLM authentication.
We are using the active directory user database.

Something else I have noticed: IN the history all the users are coming through as Guest for Wingate User and a blank under Username.

Gavin
Toowoombah
 
Posts: 4
Joined: Apr 12 05 2:30 pm

Postby MattP » May 03 05 4:25 pm

Ok, can you go to IE>Tools>Internet Options>Security>Custom level, scroll all the way down to User Authentication and select either Automatic Login with current username, or Prompt for username.

Also, make sure that your NT guest account is disabled.
MattP
Qbik Staff
 
Posts: 991
Joined: Sep 08 03 4:30 pm


Return to WinGate

Who is online

Users browsing this forum: Bing [Bot] and 19 guests