Hi everybody,
Could you please tell me where I can find the checkbox for windows authentication on web access?
Please see my configuration as shown below:
Hi everybody,
Could you please tell me where I can find the checkbox for windows authentication on web access?
Please see my configuration as shown below:
Hi Ketsia,
As Steve mentioned, Web Access 10.1 will have the Windows Authentication option easily available to you. Please install Web Access 10.1 before proceeding with the next steps.
Once Web Access 10.1 is installed, you need to make sure that your Web Access is configured properly. In the Web Access configuration page [default link is http://machinename/laserfiche/configuration/], under Connections, please make sure your repository is setup to use "Auto-login using integrated Windows authentication":
Once you have done that, you should now be able to see Options available from the Web Access login page, expand the options and you should be able to see the Windows Authentication checkbox:
Manually update the C:\Program Files\Laserfiche\Web Access\Web Files\Config\WebAccessConfig.xml file. Look for the <Authentication ... /> node and just change this ShowWinAuthBox="0" from 0 to 1.
Using version 10.3.1, this is the only method that lets the "Windows Authentication" checkbox show up.
on 10.3.1 this added the auto login and windows auth boxes, but using either of those boxes results in "access denied [9013]". Logging in w/ my windows credential and those boxes disabled works fine.
What gives?
Auto login requires Kerberos. Have you configured that? There are whitepapers on the support site.
@████████
Yes, I followed the white paper, though its very out of date. It references IIS 7 as the newest version.
All I did was follow the first few steps, especially configuring web access server on the domain controller. I didn't manually create the SPN records since its newer than IIS 7.
Still not working. Any tips?
Right, the SPN's generally exist now. The main required step is to trust the machine for delegation in AD and to make sure the IIS authentication settings are right (e.g. I think you want kernel-mode on). That's one reason we are trying to move from Kerberos to federated authentication with LFDS - when Kerberos doesn't work there isn't a lot to go on.
@████████, We did all that. Also, the issue of this post happened where Windows Auth and Auto Login boxes were not available. This is a fresh server and fresh install of Web Client 10.3.1. I had to make the Config changes mentioned above to get them to appear.
Could these be related? Is it likely that we will figure out how to resolve this? Or should I just plan to install the Web Client on the same machine as the LFS?
I don't think it's related, no. It's definitely possible to get it working, it's more a question of priorities on your end. One option would be to install it on the LFS machine for now and plan to move it later. If you use a dns alias to access the web client then your users won't even notice when you switch.
I found an updated Kerberos document that helped me find where we went wrong. It was a checkbox on LFDS and one in the Web Access Config.
We are switching to Rio, so the LFDS connection is new.
My VAR and I were using the Kerberos doc from 2009.
If you scroll over to the right on the Configuration page you should be able to edit your repository and change "Prompt for Laserfiche credentials" to "Auto-login using integrated Windows authentication" or "Prompt for Windows domain credentials".
Hi Steven,
I have tried to put "Auto-login using integrated Windows authentication" or "Prompt for Windows domain credentials" and am still not seeing the windows authentication as on thick client. Did I miss a step? or in this version it does not appear...please note that the user has login on his workstation with his windows account and this user is found in LF administration console in windows account user section.
Hi Ketsia,
Are you referring to the Windows Authentication checkbox on the login page? What is the exact version of Web Access installed? Are you using 10.0? If so, install version 10.1 and it should have the option to use Windows Authentication or Auto-login.
Hi Steven,
This the version that I am using
Laserfiche Web Access 10.0.5.261
Laserfiche Repository Access 10.1.0.119
Hi Ketsia,
As Steve mentioned, Web Access 10.1 will have the Windows Authentication option easily available to you. Please install Web Access 10.1 before proceeding with the next steps.
Once Web Access 10.1 is installed, you need to make sure that your Web Access is configured properly. In the Web Access configuration page [default link is http://machinename/laserfiche/configuration/], under Connections, please make sure your repository is setup to use "Auto-login using integrated Windows authentication":
Once you have done that, you should now be able to see Options available from the Web Access login page, expand the options and you should be able to see the Windows Authentication checkbox:
What if you want the checkbox, but don't want to auto-login? Is that possible?
Hey, I have Web Access 10.4 installed but yet there is no auto-login using windows credentials, was this changed to auto-login using kerberos?
Yes, the text was changed to make it clearer that there is often another configuration step required, i.e. setting up Kerberos, as well as to distinguish it from Windows authentication via LFDS.
I am trying to set this up and have the configuration shown below.
However I do not get the "option" to use Windows authentication. I have refreshed the login page with no success. How do I resolve this issue.
I installed laserfiche web access 10.2 and try all the connection option choice
and did not see the option that allow me to check the box Windows authentication to let a authenticate Windows user to omit to fill the credential again