School Guardian Filtering problem

[rob_f]

dgordon - everything looks fine with your usernames, basically top two boxes are user and @domain and next two Netbios domain name then user.

 

The system assumes that your Netbios domain name (i.e. the domain name you usually see in the windows logon box on a workstation) is the same as your DNS domain name up to the first dot (e.g. netbios domain name = school, DNS domain name = school.grid.sch.uk). If this isn't the case then you might need to specify it separately in the authentication settings. However if this isn't right then using NTLM Auth will fail straight away and the proxy won't be able to join the domain.

 

If user@domain is missing generally you see people being authenticated, but no groups found which causes them to go to Default Users. You should be able to see this usually in the authentication logs. Do you have Default Users turned on, as if you don't it may be then falling back to Unauthenticated IPs. Having said that, Use SAMAccountName should avoid that anyway by not using the @domain part of the username.

 

I see Linkazoid has a ticket open with support on a different issue, you might want to hijack it with this one too and see what they reckon. Same for dgordon, if you can't get anywhere with this feel free to call in.

[dgordon]

Hi Rob,

Thanks for your reply. We do not currently have support with SmoothWall - is this something that we would need to purchase support for, or would it be classed by SmoothWall as a bug that needs a fix?

 

Cheers,

Daniel

[tom_newton]

@dgordon: call it in anyway - and we will look at it!

 

Also - looks like you are with Custom Tech of Sydney. They should be able to help more directly. Talk to Gordon Hubbard or Judi Dey there.

Edited February 23, 2010 by tom_newton

[JJonas]

We had a similar problem recently. We had to enable the SAM Account name option to get it to work. (services>>authentication>>settings>>advanced)

[dgordon]

linkazoid: Are you still experiencing this problem? From what we can tell, it's only happening to sites that are on one of our custom lists (for example, youtube.com is on a staff-only allow custom list). Does that sound like the same thing that's happening for you?