Results 1 to 4 of 4

Thread: SSO with Proxy

  1. #1
    Join Date
    Sep 2012
    Posts
    2
    Rep Power
    3

    Default SSO with Proxy

    I'm having an issue with SSO via a proxy. SSO seems to work fine if you point your browser at the mailboxd machine, but using the proxy, the login prompt is being presented.

    On the mailboxd machine, in the mailbox.log machine I get the following entries when trying to access the proxy:
    Code:
    2012-09-19 11:30:29,249 INFO  [btpool0-15://email.zimbratest.com/service/spnego] [ip=10.1.11.12;ua=Mozilla/4.0 (compatible;; MSIE 7.0;; Windows NT 6.0;; WOW64;; SLCC1;; .NET CLR 2.0.50727;; .NET CLR 3.5.30729;; .NET CLR 3.0.30729);] account - spnego auth failed: authentication failed for [N/A], SpengoAuthenticator: no user found, authentication failed
    2012-09-19 11:30:29,250 INFO  [btpool0-15://email.zimbratest.com/service/spnego] [ip=10.1.11.12;ua=Mozilla/4.0 (compatible;; MSIE 7.0;; Windows NT 6.0;; WOW64;; SLCC1;; .NET CLR 2.0.50727;; .NET CLR 3.5.30729;; .NET CLR 3.0.30729);] account - spnego auth failed: authentication failed for [N/A], no principal
    2012-09-19 11:30:29,279 INFO  [btpool0-0://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;ua=ZCS/7.2.0_GA_2669;] soap - GetDomainInfoRequest
    What am I missing? Am I doing something wrong?

  2. #2
    Join Date
    Sep 2012
    Posts
    16
    Rep Power
    3

    Default

    Hi,
    I can't answer you question 100% but whats happening is that the proxy is stripping off the user information because the User connects to the Proxy and then the proxy connects to the mailboxd. You need to configure an X-Forward for the relevant information. Google your proxy server software and x-forward.

    Hope that helps some.

  3. #3
    Join Date
    Sep 2012
    Posts
    2
    Rep Power
    3

    Default

    Quote Originally Posted by earlgrei View Post
    Hi,
    I can't answer you question 100% but whats happening is that the proxy is stripping off the user information because the User connects to the Proxy and then the proxy connects to the mailboxd. You need to configure an X-Forward for the relevant information. Google your proxy server software and x-forward.

    Hope that helps some.
    The proxy is a Zimbra proxy.

  4. #4
    Join Date
    Sep 2012
    Posts
    16
    Rep Power
    3

    Default

    Ah. Well thats a little goofy then. I use a custom Nginx proxy on the front end that gave me the same headache. Haven't had time to fix yet. If you manage it would you mind posting back to here?

Similar Threads

  1. Replies: 0
    Last Post: 03-23-2011, 03:15 AM
  2. ZD2 and Proxy
    By zimjackson in forum General Questions
    Replies: 3
    Last Post: 02-10-2010, 10:47 AM
  3. BES and Proxy
    By brianfinley in forum Zimbra Connector for BlackBerry
    Replies: 1
    Last Post: 06-05-2009, 10:47 AM
  4. Mod Proxy
    By brucealeg in forum Administrators
    Replies: 4
    Last Post: 07-16-2007, 08:14 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •