User authentication

[MastaCico]

I have this question :
I use the NT users on a AD server.
In the user section they are correctly listed.
When the connect through NAT users are shown as Guests, i tried to select NTLD auth in wwwproxy but no changes.
Only with WGIC it works correctly.

Any suggestions?

[jamesc]

To use the NTLM authentication of the WWW Proxy, you will either need the proxy set up in the users browsers, or set up an "Intercept" of the NAT connection in the Session area of the WWW Proxy Service; you will want to intercept port 80.

* For Your Information: In Internet Explorer, you can change how the browser behaves when authentications is required. Tools menu --> Internet Options --> Security tab --> Custom Levels --> Scroll down the bottom too "User Authentication"


In the default setup, NAT users will be guests if they have not been authenticated beforehand. If you want to stop this, create a policy in the Extended Networking Service; you may want to set it up with "Assumed" authentication.

Authentication in WinGate can be done with.

Your Web Browser: NTLM / BASIC
The WinGate Internet Client
Assumed Users: Assumed by Computer Name (When WinGate is the DHCP Server)
Assumed by IP Address

*When using the WinGate User Database, you would use JAVA authentication as opposed to NTLM.

[MastaCico]

ok so i hav already the intercept on port 80, so do i only need to enable the proxy manually in IE right?
WG isn't the dhcp server so i can't use assumed user

I need also to change the user authentication in IE if i do so?

Thanks a lot

Cico[/code]

[ImmediateAction]

If you are intercepting port 80, then you will not have to place the Proxy Address into IE. If you are using the WinGate Internet Client or NAT, that is when port 80 is intercetped and put through the proxy. So NAT is not getting intercepted? Do the LAN clients have a Default Gateway and DNS address in their TCP/IP settings? Was the ENS option loaded with WinGate; that looks after NAT ... look for the "Extended Networking Service" in the system tab of GateKeeper

If WinGate is not the DHCP server, you can still use "Assume by IP Address".

Ususally you do not need to change the Authentication methods in IE; but there are a few options that *could be modified.

[MastaCico]

I have a problem with version 6.1, nat doesn't intercept port 80 , it does only if i set proxy in IE.
I use dhcp but is the W2ksrv dhcp, so i can't use assumed user by ip, basic auth and ntld doesn't work to me, IE still use guest login, i checked in the options and i selected "use current login" but in the sytem events is logged "auth. failed guest on....."
I selected under policies user must be auth.

relly don't know what's wrong.