Hi all,
we have a test enviroment to test WAF features. We want to have the possiblity to have "domain\username" working. So when I set User Affix to "none" i can login with my testuser called "email" and OWA opens.
If i now change to User Affix "prefix" to "arweb\" (additional tested just "arweb") I get this message:
2014:10:29-10:52:09 TEST reverseproxy: [Wed Oct 29 10:52:09.463472 2014] [authnz_aua:error] [pid 11715:tid 4130544496] [client 172.16.1.40:60823] [arweb\email] AUA responded with 'DENIED', referer: https://email.arweb/owa_owa_form
2014:10:29-10:52:09 TEST reverseproxy: id="0299" srcip="172.16.1.40" localip="172.20.18.222" size="197" user="arweb\email" host="172.16.1.40" method="POST" statuscode="302" reason="-" extra="-" exceptions="SkipURLHardening, SkipFormHardening, SkipFormHardeningMissingToken" time="45394" url="/owa_owa_login" server="email.arweb" referer="email.arweb/.../owa;httponly;secure"
2014:10:29-10:52:09 TEST reverseproxy: id="0299" srcip="172.16.1.40" localip="172.20.18.222" size="786" user="-" host="172.16.1.40" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipURLHardening, SkipFormHardening, SkipFormHardeningMissingToken" time="1892" url="/owa_owa_form" server="email.arweb" referer="email.arweb/owa_owa_form" cookie="-" set-cookie="-"
2014:10:29-10:52:09 TEST reverseproxy: id="0299" srcip="172.16.1.40" localip="172.20.18.222" size="1502" user="-" host="172.16.1.40" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipURLHardening, SkipFormHardening, SkipFormHardeningMissingToken" time="1037" url="/REF_RevAutOwa/Screenshotcss.css" server="email.arweb" referer="email.arweb/owa_owa_form" cookie="-" set-cookie="-"
2014:10:29-10:52:09 TEST reverseproxy: id="0299" srcip="172.16.1.40" localip="172.20.18.222" size="8287" user="-" host="172.16.1.40" method="GET" statuscode="200" reason="-" extra="-" exceptions="SkipURLHardening, SkipFormHardening, SkipFormHardeningMissingToken" time="669" url="/REF_RevAutOwa/company_logo.png" server="email.arweb" referer="email.arweb/owa_owa_form" cookie="-" set-cookie="-"
Are there additional features to change? seems not to corectly handle the connection via LDAP?
