+ Post New Thread
Results 1 to 7 of 7
Internet Related/Filtering/Firewall Thread, Dansguardian Authentication in Technical; Hey guys, Got Dansguardian/Squid authenticating to AD just fine but now I've got a problem with MS Office asking for ...
  1. #1

    Join Date
    Aug 2009
    Posts
    279
    Thank Post
    20
    Thanked 22 Times in 19 Posts
    Rep Power
    14

    Dansguardian Authentication

    Hey guys,

    Got Dansguardian/Squid authenticating to AD just fine but now I've got a problem with MS Office asking for domain credentials every time it's started now, putting in the correct credentials don't do anything, it just keeps prompting for them for every internet site it connects to. Anyone know how I can stop this? We're running Office 2013 and I don't really want to turn off Internet access for it in the Office settings...

    Perhaps it's something to do with DG/Squid? I'm not too sure. We're using Endian Firewall.

    Thanks

  2. #2
    Iain's Avatar
    Join Date
    Oct 2006
    Location
    Warwickshire
    Posts
    188
    Thank Post
    28
    Thanked 93 Times in 53 Posts
    Rep Power
    32
    Office 2013 only uses Kerberos auth, and not NTLM. You'll need to setup Dansguardian and Squid to use this instead.

  3. #3
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    809
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32
    Quote Originally Posted by Blue_Cookeh View Post
    Hey guys,

    Got Dansguardian/Squid authenticating to AD just fine but now I've got a problem with MS Office asking for domain credentials every time it's started now, putting in the correct credentials don't do anything, it just keeps prompting for them for every internet site it connects to. Anyone know how I can stop this? We're running Office 2013 and I don't really want to turn off Internet access for it in the Office settings...

    Perhaps it's something to do with DG/Squid? I'm not too sure. We're using Endian Firewall.

    Thanks
    As Iain said Office only talks Kerberos now. Setting it up though can be a pain in the neck, so if you're just looking for a quick fix you can these domains to an ACL that doesn't require authentication.

    Code:
    .microsoft.com
    .msecnd.net
    .windowsupdate.com
    I did this a while back until I had time to build new Squid proxies around Kerberos.

  4. #4

    Join Date
    Feb 2012
    Posts
    49
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Quote Originally Posted by Duke5A View Post
    As Iain said Office only talks Kerberos now. Setting it up though can be a pain in the neck, so if you're just looking for a quick fix you can these domains to an ACL that doesn't require authentication.

    Code:
    .microsoft.com
    .msecnd.net
    .windowsupdate.com
    I did this a while back until I had time to build new Squid proxies around Kerberos.
    this hasnt worked for me. any other ideas? doesnt seem to be any consistency in it asking for credentials but its very annoying.

  5. #5
    Duke5A's Avatar
    Join Date
    Jul 2010
    Posts
    809
    Thank Post
    83
    Thanked 132 Times in 115 Posts
    Blog Entries
    8
    Rep Power
    32
    Office 2013 might be calling out to different domains then. Just monitor your Squid access log while you recreate the issue on a test machine and whitelist the domains that are getting blocked.

    Code:
    tail -f /var/log/squid3/access.log | grep <ip address of test machine>

  6. #6
    monkeyx's Avatar
    Join Date
    Nov 2006
    Posts
    364
    Thank Post
    8
    Thanked 52 Times in 41 Posts
    Rep Power
    26
    Just to confirm we got this working via acls for on the squid.conf by adding the 2 sites below

    .microsoft.com
    .msecnd.net

  7. #7

    Join Date
    Feb 2012
    Posts
    49
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    This seems to have improved situation but it still comes up occasionally. Thanks.

SHARE:
+ Post New Thread

Similar Threads

  1. MRBS + NTLM Authentication
    By Frazer in forum *nix
    Replies: 13
    Last Post: 29th June 2006, 02:00 PM
  2. Pass through authentication with Dansguardian based webfiltr
    By NetworkGeezer in forum How do you do....it?
    Replies: 16
    Last Post: 9th May 2006, 12:11 PM
  3. Authenticating MRBS against Active Directory using LDAP
    By Wizzer in forum Web Development
    Replies: 2
    Last Post: 26th January 2006, 04:21 PM
  4. Replies: 19
    Last Post: 2nd November 2005, 12:11 PM
  5. Replies: 1
    Last Post: 6th October 2005, 01:49 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •