WinGate authentication issue

Use this forum to post questions relating to WinGate, feature requests, technical or configuration problems

Moderator: Qbik Staff

WinGate authentication issue

Postby 2CTCSAOL » Dec 04 13 6:04 am

Hello all,

I am using WinGate 8.0.4.4629 on Server 2008 R2 and have my authentication set to use Active Directory.
I have the proxy set up in transparent mode with the Default Gateway assigned to the WinGate server in DHCP.

When non-domain users (and the occasional domain user) open IE, Chrome or Firefox and connect to the internet they are prompted for their username and password.
They can type it and gain access but it prompts them multiple times to login.
All users are part of an AD group which has access to use the proxy in the Authentication access rule (where all users except domain\Proxy Users are forced to authenticate).

After they type their username and password the first time they are able to cancel the following prompts and access is okay for a while, until the authentication times out.
In IE, checking the "Remember my credentials" has no effect.
In Chrome there doesn't seem to be a way to have it remember credentials.
I think it may have something to do with the fact that the proxy is operating in transparent mode and each authentication attempt shows the current website instead of the proxy server, but I could be wrong.

Is there a setting in WinGate or IE (Chrome, Firefox) that can help with this?
Additionally is there a way to change the timeout for authentication?

Thanks!
2CTCSAOL
 
Posts: 12
Joined: Oct 26 13 3:51 am

Re: WinGate authentication issue

Postby adrien » Dec 04 13 10:35 am

Hi

as you suspected, this problem is due to the fact that the connections are being intercepted, so the client doesn't know it's authenticating to the proxy - it thinks it's authenticating to different web servers, and won't use credentials used for one site with another site. Hence it prompts again for authentication.

IE has a fudge control for this, where you can specify to always auth with current logged in credentials for all sites.

But we recommend instead that your browsers are configured to use the proxy explicitly. This can be pushed out with a GPO if you're in an Active Directory.

Regards

Adrien de Croy
adrien
Qbik Staff
 
Posts: 5448
Joined: Sep 03 03 2:54 pm
Location: Auckland


Return to WinGate

Who is online

Users browsing this forum: No registered users and 12 guests