Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 37 subscribers
  • Views 1939 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Proxy Autentifizierung funktioniert nach Update 8.201 -> 8.204 nicht mehr

madmaxx79
Hallo zusammen. wie schon in der Überschrift steht habe ich heute auf die 8.304 geupdated.. Jetzt kommt aber keiner mehr in Internet..

SSO per AD ist eingestellt und hat auch funktioniert.
Zeit ist gleich. Astaro ist Member.

das steht im LOG:

2012:05:30-10:34:57 DN-FW01-2 httpproxy[7109]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="10.20.1.116" dstip="" user="M*******chel" statuscode="407" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction=" ()" size="4860" request="0xaed0e58" url="ocsp.comodoca.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRtl6lMY2+iPob4twryIF+FfgUdvwQUK8NGq7oOyWUqRtF5R8Ri4uHa/LgCEQDmJ6s9lzloKahbkOvV/i8S" exceptions="" error=""
2012:05:30-10:34:57 DN-FW01-2 httpproxy[7109]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xaf04310" function="auth_adir_getsid_callback" file="auth_adir.c" line="586" message="winbindd request failed ()"

und

2012:05:30-08:42:10 DN-FW01-1 httpproxy[6977]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xa0b9a30" function="auth_adir_auth_crap_callback" file="auth_adir.c" line="1061" message="Authorization denied (NT_STATUS_IO_TIMEOUT)"
2012:05:30-08:42:10 DN-FW01-1 httpproxy[6977]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="10.20.1.146" dstip="" user="S****ner" statuscode="407" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction=" ()" size="5028" request="0xa0b9a30" url="www.google.de/.../search


und

2012:05:30-08:46:03 DN-FW01-1 httpproxy[6977]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0xa0b91c0" function="auth_adir_auth_crap_callback" file="auth_adir.c" line="1061" message="Authorization denied (NT_STATUS_WRONG_PASSWORD)"
2012:05:30-08:46:03 DN-FW01-1 httpproxy[6977]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="10.20.4.23" dstip="" user="e***ut" statuscode="407" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction=" ()" size="5318" request="0xa0b91c0" url="www.google.de/s




Das ist nur ein Beispiel. Das Log ist voll damit, alle User. Der User bekommt nur das Fenster um sich zu autentifizieren (trotz SSO das funktioniert hat!) Teilweise steht auch "wrong_Password" im LOG, das ist aber definitiv nicht der Fall.




Es war natürlich das Update von 8.301 auf 8.304 @admins: bitte Überschrift anpassen


Authentication Server Tests passed!! Mit diversen Usern (bei denen "Wrong Password" im Log steht)


This thread was automatically locked due to age.
  • 0
    (Sorry, my German-speaking brain isn't working[:(])

    The first step is that you should ask your reseller to have Astaro Support look at this.

    For some reason, winbindd is not running.  Try rebooting.  If that doesn't help, try deleting the Astro in AD, and then joining again in WebAdmin.

    MfG - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    It seems that deleting and putting it again in the domain was the key..
    Running now..

    By the way: I´m still waiting for the call from my reseller... great work!
Unfiltered HTML