topic Re: Active Directory authentication in Web Security

Active Directory authentication

angfeglandagan — Tue, 03 Jun 2008 14:13:40 GMT

Hi,
Just curious having this kind of setup..Two leg proxy...using the ;

P1 - internal IP

P2 - external IP

What should be the route on both interfaces..

Im using AD not LDAP for authenticating client to have access to the internet.

What do i use... NTLMSSP?

Is there someone out there who has this kind of setup?

Re: Active Directory authentication

khoanguy — Thu, 05 Jun 2008 01:23:35 GMT

The route for internal traffic P1 should be default gateway for internal clients.

The route for external traffic P2 should have default gateway to get out to Internet.

P1 and P2 should be on different subnets.

NTLMSSP for SSO (single sign on), which would be ideal since clients would not be prompted for authentications.

There are some setups using P1 and P2.

Re: Active Directory authentication

angfeglandagan — Fri, 06 Jun 2008 13:49:13 GMT

One quick question, is NTLMSSP supported on Windows 2003 AD? for SSO?

Im tryin to search for any guides on the NTLMSSP under Windows 2003 environment.

regards,
kira

Re: Active Directory authentication

Doc_ironport — Sat, 07 Jun 2008 00:16:20 GMT

One quick question, is NTLMSSP supported on Windows 2003 AD? for SSO?

Yes, it works fine under Windows 2003 AD, and gives full Single Sign-on (completely transparent to the user as long as they are logged into the domain).

Re: Active Directory authentication

khoanguy — Sat, 07 Jun 2008 07:46:11 GMT

more on ntlmssp can be found here:

http://tinyurl.com/2n2ykh