Question

Web Access 9 Windows Authentication

Web Client

Updated October 1, 2014

asked on September 30, 2014 • Show version history

Trying to get Web access 9 to work correctly. The Web access and Laserfiche server on on different servers...

So far if I use IE, it will automatically log me in to the repository.

BUT

If I log out and am on the login page shown here:

I get that page with that error, and If I try to login, with Windows Authentication or without it on this screen regardless of what browser I'm using it sends me to this page below.

I'm not sure why I can login automatically through IE but not when the login page appears? I have the Web Access Server set the correct delegation with kerberos..

Also does anyone know the specific services I can set in AD rather than giving it access to any services through kerberos?

Thank you!

0 0

Replies

replied on September 30, 2014

Yes, thats the document I've been using to set this up. It is set to that exact configuration.

0 0

replied on September 30, 2014

Is the Web Access server in the same domain as the LF server?

Is the Web Access server on the DMZ?

Do you have the LF client installed on the machine? Does that work with windows authentication?

0 0

replied on September 30, 2014

It's on the same domain. It's all internal so web access is not on the DMZ. I can access it through the client on the web access server also.

0 0

replied on September 30, 2014

Are you using IE? If not, can you test it with IE?

In Web Access, if you type in <Domain>\<username> in the username login field, where <domain> is your actual domain name and <username> is the valid domain account does it work?

0 0

replied on September 30, 2014

Yes, it works if I'm prompted in IE... but not if you are at the Laserfiche login screen, on any browser the login screen does not work at all, Windows authentication or LF authentication...

So when you log out of and it takes you to the login screen ... you cant login.

0 0

replied on September 30, 2014

Make sure you have no other copies of IE open on the local machine. Then open IE.

In IE, go to Tools > Internet Options > Security > Trusted sites and add the Web Access URL to the list of trusted sites.

Then go back to Tools > Internet Options > Security > Trusted site > Select Custom Level > Scroll all the way down to User Authentication > Logon. Select Automatic logon with current username and password.

Close IE, verify your settings and test.

0 0

replied on September 30, 2014

I tried that before, and it still doesn't work on the login screen :(

Do you happen to know what services I need to add in AD for this to work correctly with Kerberos? We don't want to have it set to allow any service, and would rather set it to specified services only. I can't seem to find it anywhere in the documentation...

Thanks for the help Raymond

0 0

replied on September 30, 2014

We had to uninstall the updates to get this to work. Now everything works except for the auto login feature.

Support website: reference number KB 1013541

0 0

replied on October 1, 2014

Thank you! Not sure why that worked since I'm not getting a Macstate error, but it seems to have fixed most of the issues.

0 0

replied on October 1, 2014

Excellent. Glad it works.

0 0

replied on October 1, 2014

Dylan,

In most cases like this, it is usually the Kerberos configuration that is the problem. However, Sucheta brought up a good point. Are you getting the "View Macstate" message on the server?

0 0

replied on September 30, 2014

Please verify your Kerberos configuration against the following white paper:
https://support.laserfiche.com/GetFileRepositoryEntry.aspx?id=1163&mode=download
The white paper references Web Access 8 but can also be applied to Web Access 9 and IIS8

0 1

You are not allowed to follow up in this post.

Question

Question

Web Access 9 Windows Authentication

Replies

Sign in to reply to this post.