User authentication with basic

[citkorohr]

Hi folks!

I am struggeling with the basic authentication over the MWG.

What I have so far:

The proxy then tells me only authorized access is permitted.
My client sends the Basic authentication data to the proxy and then nothing happens.

Normally the proxy needed to ask my giving AD. But unfortunately it stucks in my rule "perfom authentication".

[marcus69]

Hallo @citkorohr 

maybe your MWGs has lost its Domain Membership.
Have you already checked your MWGs DomainMembership state ?

The following Guide might help to check if there is a Problem with Authentication against your AD:

https://community.mcafee.com/t5/Documents/Web-Gateway-Understanding-NTLM-and-Windows-Domain-Membersh...

What is the reply of an Authentication test ? (see screen below)

Does the AD reply the group memberships of the testuser ?

Gruß
    Marcus

[citkorohr]

Hi @marcus69,

thank you for your fast reply.

I checked your giving information. My MWG hasn't lost its' domain membership and the authentication test results in a success.

[marcus69]

Hi @citkorohr 

ok, so we have no problem with the authentication itself.

Then my conclusional guess would be that it is buried in the logical structure of the ruleset or maybe a syntax error on defining conditions or rule criterias.

I'd suggest to use "Rule Trace Central" to dive into debugging the rule set in terms of ruleconditions and User-Defined variables.

Best regards
   Marcus

[citkorohr]

@marcus69 

Okay. I located where exactly the authentication doesn't work.

My MWG is a member of a domain named some.what and the user in in the domain called test.local.

The domain some.what trusts test.local but test.local doesn't trust some.what.

NTLM and Kerberos authentication works over the trust. Only basic auth doens't.

I tested this while using authentication crendentials of some.what.

This information tells me, my ruleset and my rules are working properly (at least I believe this).

[citkorohr · Accepted solution]

Found the solution by myself.

The ruleset is okay. The error was in my infrastrukture.

/closed