topic Re: Authentication problems with users on terminal server in Network Access Control https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79489#M6493 <HTML><HEAD></HEAD><BODY><P>What about deploying an ACS server?</P></BODY></HTML> Wed, 24 Jul 2002 07:37:10 GMT ali-franks 2002-07-24T07:37:10Z Authentication problems with users on terminal server https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79486#M6489 <P>I have the following problem with the way the pix authentication works . It only maps a username to a ip address. The pix only authenticates machines and not users. This is a problem because if you have 50 users who use a terminal server like win2k or citrix you cant enable authentication because of the way the auth works. The very first person who connects to the internet from the terminal server will get prompted for authentication thereafter all other users on the terminal server are able to browse using this persons account and will never get prompted for authentication. I have opened a TAC case regarding this and there is no workaround that can be supplied by TAC. My cisco account manager has put this forward as a feature request but the time to get this resolved is unknown and we will be loosing customers if we cant find a workaround for this problem. Has anyone experienced the same problem and found a solution that can be used until cisco upgrade the authentication on the pix?</P> Fri, 21 Feb 2020 18:02:13 GMT https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79486#M6489 jerryd 2020-02-21T18:02:13Z Re: Authentication problems with users on terminal server https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79487#M6491 <HTML><HEAD></HEAD><BODY><P>The best solution would be to reorganize the way your accounting takes place. The PIX cannot be used for this, so utilize one generic account and have the authentication and accounting for this authentication occur prior to reaching the terminal server.</P></BODY></HTML> Mon, 22 Jul 2002 20:57:40 GMT https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79487#M6491 smahbub 2002-07-22T20:57:40Z Re: Authentication problems with users on terminal server https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79488#M6492 <HTML><HEAD></HEAD><BODY><P>I would agree but our clients outsourced the security to us and dont have the skills or dont want to do it this way. So Im going to have to wait for Cisco to fix the problem and possibly loose a few clients.</P></BODY></HTML> Tue, 23 Jul 2002 09:49:34 GMT https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79488#M6492 jerryd 2002-07-23T09:49:34Z Re: Authentication problems with users on terminal server https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79489#M6493 <HTML><HEAD></HEAD><BODY><P>What about deploying an ACS server?</P></BODY></HTML> Wed, 24 Jul 2002 07:37:10 GMT https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79489#M6493 ali-franks 2002-07-24T07:37:10Z Re: Authentication problems with users on terminal server https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79490#M6494 <HTML><HEAD></HEAD><BODY><P>I am currently using AAA with tacacs. This still wont solve the problem. There is a fundamental flaw in the authentication system on the pix which wont allow for multiple users being authenticated all coming from 1 ip address.</P></BODY></HTML> Mon, 29 Jul 2002 11:33:38 GMT https://community.cisco.com/t5/network-access-control/authentication-problems-with-users-on-terminal-server/m-p/79490#M6494 jerryd 2002-07-29T11:33:38Z