Safari Authentication bound to AD

[winker]

Morning all -

 

We have a problem where our users are getting prompted for username&password when accessing the internet via Safaria even though the iMacs are on the domain and also authenticating against AD.

 

The users logon and get all the mappings from AD as expected without problems.

 

Any tips or hints on this would be great.

[bladedanny]

Is it asking for a keychain password?

[leon999uk]

There is a bit in safari preferences under proxies which allow you to enter in a username and password.

[FN-GM]

There is a bit in safari preferences under proxies which allow you to enter in a username and password.

 

also in the proxy settings on the Nic

 

I take it you are using ISA? Only IE can transparently pass credentials to ISA

[winker]

also in the proxy settings on the Nic

 

I take it you are using ISA? Only IE can transparently pass credentials to ISA

 

 

 

The setup we have is a AD network with a Os X Server and both bound together to get the best of both worlds.

 

Ideally we would like our users to logon using the standard AD username and password and then use this to authenticate against any internet browsing be it via Safari, Firefox etc.

[FN-GM]

The setup we have is a AD network with a Os X Server and both bound together to get the best of both worlds.

 

Ideally we would like our users to logon using the standard AD username and password and then use this to authenticate against any internet browsing be it via Safari, Firefox etc.

 

They will have to enter credentials when they open the browser. Alternatively you could set a rule in ISA to allow the macs to have no auth when connecting to the net.

[HodgeHi]

Does ISA support Ident authentication. This is the way i went when using Safari with our School Guardian filtering. I found we had issues when using Safari with NTLM auth. It broke a fair few sites. I used the identd for OS X. There's a package install available for 10.4. This worked with 10.5 as well. This was with Leopard and Safari 3. Not too sure how Safari 4 fairs with NTLM auth.

 

The identd works by passing the currently logged on Aqua user to the ident server. I was the only user to use it though since i never had the chance to deploy. We no longer run our School Guardian at the moment

[winker]

They will have to enter credentials when they open the browser. Alternatively you could set a rule in ISA to allow the macs to have no auth when connecting to the net.

 

Hi thanks for the advice, however working in a educational environment we need to ensure all users internet browsing is monitored and traceable.

 

I do understand it is the easy solution.

 

I wonder why Authentication doesn't work when everything else seems to work fine!