Why does Kerberos authentication fail using the Smoothwall Proxy Pac?

Article #:

Product

Castle

1757

All

All

Summary

When using Kerberos authentication, clients using the proxy need to reference the proxy by hostname, not by IP address

Problem

Kerberos authentication fails when using Smoothwall-generated proxy.pac files

Solution

The proxy.pac file that is generated on the Smoothwall will auto-generate depending on the way it was requested.

http://<Smoothwall_IP_address>/proxy.pac will have the IP in the proxy statement.

http://smoothwall.yourdomain.local/proxy.pac will have the FQDN in the proxy statement.

Setting clients to use: http://smoothwall.yourdomainlocal/proxy.pac as the configuration script should fix this issue.

Attribution:

Last updated:

Author:

Contributions by:

30 August 2016

 

DMT

 

Copyright © 2000-2016 Smoothwall All rights reserved.