Versions / Builds Affected2015
Problem SummarySome pages cannot be opened and a proxy authentication dialogue asking for credentials would show up when using Kerberos authentication.
TT / JIRAID2232
How to IdentifySome pages cannot be opened and a proxy authentication dialogue asking for credentials would show up. Screenshot of the problem: http://ftp.gfisoftware.com/temp/PSG/WM/temp/proxyAuthentication.jpg
In the WebMonitor dashbourd you would only see IP-addresses (no usernames would be appearing)
Kerberos authentication is configured (if the customer should be using any other authentication method than Kerberos, the problem is different and needs to be investigated further)
Workaround / Fix Details- Verify if the customer is using Kerberos authentication in WebMonitor
- Make sure the proxy-settings in the users web-browsers use the FQDN of the WebMonitor server (and not the IP Address)
- Change the user the GFI Proxy Service is running under to the Local System Account
1. On the domain controller check if the user account which under the proxy service is running has a Service Principal Name (SPN) registered for the proxy service.
Using SetSpn.exe you can enter following command into the command prompt:
"setspn -L usernameFQDN"
2. If there are no SPN registration for the proxy service account you should create one with this command:
"setspn -s HTTP/proxymachinenameFQDN usernameFQDN"
Further information can be found on: http://technet.microsoft.com/en-us/library/cc731241.aspx
Required ActionsUpdate to service release 1