I set up an AD-SSO profile, but machines that are in the source network, yet not in the domain yet, cannot log in at all. The pop-up prompt appears, but any login to that fails, and after 3 failures I get Astaro's Access Denied page with an Authentication Failed error. The web filtering log shows status code 407. There are no entries in the authentication daemon's log file at all.
If I try to hit the proxy from a machine that IS in the domain, but logged in with a local account, then the pop up prompt appears and works correctly.
Is this expected?
Does the machine need to be joined to the domain to authenticate against AD at all?
TIA (again),
Adam
If I try to hit the proxy from a machine that IS in the domain, but logged in with a local account, then the pop up prompt appears and works correctly.
Is this expected?
Does the machine need to be joined to the domain to authenticate against AD at all?
TIA (again),
Adam