NTLMSSP Issues

[Ulises Pena Rojas]

Hi!

I have a problem with auntentications in IronPort Web-Security

I have a device with the following data:

Model: IronPort S370 (Web Security Apliance)

Transparent Proxy Mode

Authentication: Real Name

Protocol: NTLMSSP or Basic

Re-Authentication - Disabled

Is Linked to a Domain

The problem is that I have with the authentication errors as shown

Critical: PROX_AUTH.........NT_STATUS_NO_LOGON_SERVERS

Wed Jun  1 11:05:54 2011 Critical: PROX_AUTH : - : NTLMSSP BH: NT_STATUS_NO_LOGON_SERVERS

Wed Jun  1 11:05:54 2011 Info: PROX_AUTH : - : NTLM CRAP authentication for user [DOMINIO]\[usuario] returned NT_STATUS_NO_LOGON_SERVERS (PAM: 12)

Wed Jun  1 11:05:54 2011 Critical: PROX_AUTH : - : NTLMSSP BH: NT_STATUS_NO_LOGON_SERVERS

Wed Jun  1 11:05:55 2011 Info: PROX_AUTH : - : NTLM CRAP authentication for user [DOMINIO]\[usuario] returned NT_STATUS_NO_LOGON_SERVERS (PAM: 12)

Wed Jun  1 11:05:55 2011 Critical: PROX_AUTH : - : NTLMSSP BH: NT_STATUS_NO_LOGON_SERVERS

Wed Jun  1 11:05:55 2011 Info: PROX_AUTH : - : NTLM CRAP authentication for user [DOMINIO]\[usuario] returned NT_STATUS_NO_LOGON_SERVERS (PAM: 12)

How I can solve the problem of failed authentications

Thank you very much for you help

[Ken Stieers]

On your WSA, go to Network, Authentication, click on the realm you're using.

Here's where define the DC's you're using, and can join the box to the domain.

Make sure the domain controllers listed here exist. 

If you're using names for the domain controllers, instead of IP's, make sure that DNS servers are set under Network>DNS

Make sure there is a machine account for the WSA in your domain.

Hit the Test button on this page and look at what it returns...