cookie_monster Posted September 21, 2009 Posted September 21, 2009 We have been using SSL login with Smoothwall on our XP clients as we like the students to login to the internet, we've come across an issue that it doesn't work with Citrix/Terminal Server. The first person to login from the box receives the SSL login page but subsequent users don't get the page they are automatically logged in and all traffic shows as the first user to login. Anyone else using SSL login with TS or Citrix and have a way around this issue? Think I’ll open a ticket as well. Cheers.
Ric_ Posted September 21, 2009 Posted September 21, 2009 @cookie_monster: I believe that this is a known issue - Smoothie uses %computername% to track the sessions rather than checking if there is a %clientname% variable there which should be used instead.
cookie_monster Posted September 21, 2009 Author Posted September 21, 2009 (edited) Oh excellent so should NTLM auth sort this? Shame that Smoothwall didn't mention this when helping us setup the box I did mention that we use Citrix Edited September 21, 2009 by cookie_monster
cookie_monster Posted September 21, 2009 Author Posted September 21, 2009 we use NTLM with smoothwall/Citrix. I'll be looking into this tomorrow. I don't think this way will present the user with a logon page though will it.
rob_f Posted September 22, 2009 Posted September 22, 2009 AFAIK SSL login operates at a lower level of the stack, so just operates on IPs unfortunately. I've asked the guys to take a closer look at this to see if there's another way. Cookie_monster - you might want to try proxy authentication (will prompt for password, but not on a webpage like SSL login) or i seem to remember there is some way in citrix to assign a unique virtual IP to each user session? Thanks, Rob.
cookie_monster Posted September 22, 2009 Author Posted September 22, 2009 If I get time later i'm going to have a read up on proxy auth and NTLM. NTLM looks like the one to go with our desire for them to logon with SSL was so they see a web page with the AUP on not really thet they have to logon again to get the internet. Thanks.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now