View Single Post
  #1 (permalink)  
Old 2006-03-21
rubber_chicken rubber_chicken is offline
Member
 
Join Date: 2006-03-08
Location: New Zealand
Posts: 82
Rep Power: 3
rubber_chicken has an average reputation (10+)
Default Double User Authentication?

Hi all,

We have a need for a remote party to connect to the http interface on a management console. This connection requires basic authentication. I have been asked to add FW1 authentication on top of this.

I've created the rules (access and NAT) and all works well when not using FW1 authentication. After I add user authentication I get errors. I get accepts in the FW1 logs saying FW1 authent has succeeded, but the browser returns:

Error: Unauthorized
FW-1 at #name# - Your request was not authorised by the WWW server

When I authenticate I am only using the FW1 credentials.
Something in the back of my brain thinks that FW1 is proxying the connection and I need to provide both the FW1 credentials and then the web authentication at the same time - but I'm not sure if I'm right or what the syntax is if I am right.

Does anyone have any ideas? Your help would be appreciated.

Cheers
Reply With Quote