Smoothwall script stops humming on pc's

[catwoman]

Hi,

 

Has anyone found the issue with smoothwall that when you login to a pc it authenticates with a login script but after 2 1/2 mins it kills it's login and goes to unauthenticated ip?

[mrbios]

Hi,

 

Has anyone found the issue with smoothwall that when you login to a pc it authenticates with a login script but after 2 1/2 mins it kills it's login and goes to unauthenticated ip?

 

Are you using the scripts from here: https://kb.smoothwall.com/hc/en-us/articles/360002135884-Kerberos-Authentication-Scripts ?

 

If that is the route you're using, I'd run through the steps again. It most likely sounds like it's not calling the logon_loop.vbs file or doesn't have access to it.

[Tech1]

Hi,

 

Has anyone found the issue with smoothwall that when you login to a pc it authenticates with a login script but after 2 1/2 mins it kills it's login and goes to unauthenticated ip?

 

Did you ever manage to get this issue resolved? We are having the exact same problem here now. When students login it works perfectly fine, but when a member of staff logs in, after around 3 minutes it just drops off to Unauthenticated IP.

[ibpalle]

Is this using fast user switching? The script should run on login and every 2 mins after that if setup correctly. Internal timeout for the script login is 3 minutes, so if the script only runs once, the logout will be after 3 minutes so it sounds like the loop breaks and the 2nd and consecutive run never happens.

 

Another option now is to try out the iDex agent instead - that should work fine but there are a few caveats so please contact support and get them to assist you. It should not require any changes to the proxy settings. An iDex directory type needs to be added to the Smoothwall and the iDex port needs to be opened in the smoothwall access section but other than that, the system should work just the same.

 

The caveat is that iDex agent logins needs to be set to time out on a daily basis, otherwise they stay constant. This can cause misidentification scenarios in some circumstances - mainly if networks are not segregated between byod and LAN for example or there is a lack of DHCP addresses so IPs gets reused between devices often. Otherwise it's fine.

[Tech1]

Hi ibpalle, thanks for the response. I have now resolved the issue and wanted to post here just in case it helped anyone else in the future -

 

Within the GPO for the affected users (in my case it was the Teachers) User Configuration – Policies – Administrative Templates – System – Scripts, I set “Run legacy logon scripts hidden” and “Run logon scripts synchronously” to Not configured. This then matched up with the two other main GPOs that I use (Students and Support Staff)

[ibpalle]

Interesting - thank you for posting your solution.

[EmperorPeng]

This has been the bane of my life! Been wrestling with this since January 2018 and our 'solution' was to incorporate Smoothwall's scripts into our own login script. Smoothwall support have been very helpful but didn't get to the root cause.

 

Thank you Tech1, I salute you!