Error: 'Access Denied - proxy authentication required'

Versions / Builds Affected

2015

Status

Resolved

Problem Summary

Some pages cannot be opened and a proxy authentication dialogue asking for credentials would show up when using Kerberos authentication.

TT / JIRAID

2232

How to Identify

Some pages cannot be opened and a proxy authentication dialogue asking for credentials would show up. Screenshot of the problem: http://ftp.gfisoftware.com/temp/PSG/WM/temp/proxyAuthentication.jpg In the WebMonitor dashbourd you would only see IP-addresses (no usernames would be appearing) Kerberos authentication is configured (if the customer should be using any other authentication method than Kerberos, the problem is different and needs to be investigated further)

Workaround / Fix Details

- Verify if the customer is using Kerberos authentication in WebMonitor - Make sure the proxy-settings in the users web-browsers use the FQDN of the WebMonitor server (and not the IP Address) Solution 1: - Change the user the GFI Proxy Service is running under to the Local System Account Solution 2: 1. On the domain controller check if the user account which under the proxy service is running has a Service Principal Name (SPN) registered for the proxy service. Using SetSpn.exe you can enter following command into the command prompt: "setspn -L usernameFQDN" 2. If there are no SPN registration for the proxy service account you should create one with this command: "setspn -s HTTP/proxymachinenameFQDN usernameFQDN" Further information can be found on: http://technet.microsoft.com/en-us/library/cc731241.aspx

Required Actions

Update to service release 1 http://www.gfi.com/support/products/gfi-webmonitor/GFI-WebMonitor-2015-Service-Release-1-build-20141121