S370 WSA: Failed authentication after proxy update

[jds5]

Hello,

Following the update of our web proxy from version 12.0.1 build 334 to version 14.5.0 build 537.

Authentication does not happen correctly on requests going through the proxy and only HTTP 407 returns are visible in the logs on flows requesting authentication.

Are you aware of this problem with this version?

BR,

José

[Ken Stieers]

What Auth method are you using?

If you were using CDA, that's deprecated.
If transparent make sure it didn't fall out of the domain(just re-add it)

[jds5]

Thank you for your quick feedback.

NTLM used

In the 407 logs, however, we can clearly see the user login going back to the proxy,

By redoing the tests, we notice that the proxy sends authentication requests in a loop via browser popups;

However, I still see users coming up on 407 requests.

BR,

[Ken Stieers]

In the Gui, under Network/Authentication, at the bottom is a "Start Test" button.
Does that report any errors?

[jds5]

no error at this level

[amojarra]

Hi @jds5 

Can you please let us know : 

[1] If the "credential encryption" is enable:

Step 1: Choose Network > Authentication.

Step 2: Click Edit Global Settings.

Step 3: Check the Use Encrypted HTTPS Connection For Authentication check box in the Credential Encryption field.

[2] What surrogate you are using ?

[3] please check the Authlogs from "CLI > Grep" and if there is any Errors, Warning or Critical. 

Thanks 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++