NETGEAR SSL312 manual Kerberos Authentication, Troubleshooting Active Directory Authentication

Page 44

NETGEAR ProSafe SSL VPN Concentrator 25 SSL312 Reference Manual

7.Check the Require CIFS bookmark to home directory radio box to automatically allow access to users of this domain and add the home directory path in the field provided.

8.Click Apply to update the configuration. Once the domain has been added, the domain displays in the table on the Domains screen

Troubleshooting Active Directory Authentication

If your users are unable to connect via Active Directory, verify the following:

1.The time settings between the Active Directory server and the SSL VPN Concentrator must be synchronized. Kerberos authentication, used by Active Directory to authenticate clients, permits a maximum of a 15-minute time difference between the Windows server and the client (the SSL VPN Concentrator). The easiest way to solve this issue is to configure Network Time Protocol on the Date and Time screen and check that the server’s time settings are also correct.

2.Confirm that your Windows server is configured for Active Directory authentication. If you are using a Window NT 4.0 server, then your server only supports NT Domain authentication. Typically, Windows 2000 and 2003 servers are also configured for NT Domain authentication to support legacy Windows clients.

Kerberos Authentication

Of all types of authentication, Kerberos authentication is the least error prone. Users that have been defined in the Kerberos database can log into the SSL-VPN portal by entering their Kerberos user name and password and selecting the new Kerberos authentication domain from the Domain menu on the SSL VPN login page.

To configure Kerberos authentication:

1.From the Access Administration menu, select Domains. The Domains window will display. Click Add Domains.

2.On the Add New Domain screen, select Kerberos from the Authentication Type drop-down menu. The Kerberos configuration fields will display.

3.Enter a descriptive name for the authentication domain in the Domain Name field. Users will select this domain when they log into the SSL VPN portal. It can be the same value as the Server Address field or the Kerberos Domain field depending on your network configuration.

4.Enter the IP address or fully qualified domain name of the Kerberos server in the Server Address field.

3-12

Authenticating Users

v2.0, May 2007

Image 44
Contents Netgear ProSafe SSL VPN Concentrator SSL312 Reference Manual Technical Support Licensing Product and Publication Details Contents Chapter Authenticating Users Chapter Configuring the Remote Access Web Portal Chapter Monitoring and Logging About This Manual Conventions, Formats and ScopeUsing This Manual Printing this ManualPrinting a Chapter Revision History Version Date Description of ChangesAbout the ProSafe SSL VPN Concentrator Key FeaturesChapter Introduction Web Browser Requirements Microsoft WindowsFront Panel What’s in the BoxHardware Description Back Panel Steps for Deploying the SSL312 V2.0, May Single Arm Chapter Installing the SSL312Choosing a Network Topology Routing Initial Connection to the SSL VPN Concentrator Accessing the Management Interface Https//192.168.1.1V2.0, May Configuring Basic Network Settings V2.0, May Installing the SSL VPN Concentrator Managing CertificatesObtaining a Certificate from a Certificate Authority Generating a Self-Signed Certificate Uploading and Enabling the New Certificate V2.0, May Viewing and Deleting Certificates Steps for Further Configuration Chapter Authenticating Users Authentication DomainsLocal User Database Authentication Radius and NT Domain Authentication Configuring for Radius Domain Authentication Configuring for NT Domain Authentication Ldap Authentication Sample Ldap Attributes Ldap Attribute RulesSample Ldap Users and Attributes Settings Querying an Ldap ServerConfiguring for Ldap Authentication CN=Users,DC=yourdomain,DC=comActive Directory Authentication Configuring for Windows Active Directory AuthenticationV2.0, May Kerberos Authentication Troubleshooting Active Directory AuthenticationDeleting a Domain Https//IP/Domain Name/portal/Portal NameV2.0, May Setting Up User and Group Access Policies Determine Your RequirementsUsers, Groups and Global Policies Global Policies Editing Global Policy Settings Adding and Editing Global Policies Defining and Editing Global Bookmarks Groups Configuration Adding a New GroupEditing Group Settings Defining and Editing Group Policies V2.0, May Defining and Editing Group Bookmarks Deleting a Group Users Configuration Adding a New User V2.0, May Editing a User V2.0, May Defining and Editing User Policies Defining and Editing a User Bookmarks Using Network Resource Objects to Simplify Policies Deleting a UserV2.0, May V2.0, May V2.0, May V2.0, May Configuring the Remote Access Web Portal Portal LayoutsPortal Option Features for Remote Users Portal OptionsAdding Portal Layouts V2.0, May V2.0, May Adding Terminal Services Applications to the Portal Customizing the Banner Duplicating and Editing Portal Layouts Creating a Guide to Using the Portal V2.0, May Two Approaches for VPN SSL VPN Client Configuration Adding IP Address Ranges Adding Routes for VPN Tunnel Clients V2.0, May Configuring Applications for Port Forwarding Port Forwarding Applications/TCP Port Numbers Configuring Host Name Resolution SSHSample SSL VPN Concentrator Configuration Chapter Additional System ConfigurationConfiguring Network Settings Network Interface and Default Gateway Configuration Default gateway address Firewall/Router addressV2.0, May Static Route Configuration V2.0, May Network Host Table Settings Configuring DNS Settings V2.0, May Setting Date and Time System Configuration Utilities Encrypting the Configuration File Exporting and Saving a Backup Configuration FileImporting a Configuration File Erasing the Configuration and Restoring the Default Settings Upgrading the SSL VPN Concentrator FirmwareAdditional Notes on the Management Interface Chapter Monitoring and Logging SSL VPN Concentrator StatusMonitoring and Logging Active Users Event Log Log Settings Send Logs Weekly Schedule Send Logs Daily Schedule V2.0, May V2.0, May Diagnostics V2.0, May Appendix a Default Settings and Technical Specifications Factory Default SettingsTechnical Specifications GMTAppendix B Related Documents Document LinkV2.0, May Index NumericsIndex-2 Index-3 Index-4 Index-5 Index-6
Related manuals
Manual 112 pages 5.2 Kb