So I moved a FileMaker database from a machine with FM server 10 to a new machine with FM server 11.
Everything seems to be working, but the problem is it no longer prompts users for a user name and password. It seems to just log them in automatically with their windows user name.
Does anyone know what could be causing this?
Sounds like you activated external authentication on the FileMaker Server. That means that FileMaker server will try to auth using using an Active Directory or even local windows accounts on the server machine.
Look in the FileMaker Server Admin Console is you enabled External Authentication, if so, deactivate it and restart the FileMaker Service.
Related
We have a web application written using Liferay 6.2 and deployed on tomcat server. Application is accessed using Integrated Windows Authentication. Everything works fine if hostname is directly used to in url to access.
To hide the actual hostname, a CNAME record was created. When that is used to access, users get repeated prompts for credentials and authentication is rejected despite entering correct credentials.
We tried creating SPN for CNAME using the command setspn -a "HTTP/<<friendly name>>". Since connection is made on standard port 443 using HTTPS, no port number was specified when creating SPN. However, repeated authentication prompts still continue to appear. The application runs using a service account. Including the service account when creating SPN could be an option. Please share if there are any suggestions on what else could be tried.
What does "everything works fine" mean? Are you getting prompted and when you enter creds it works correctly, or it does SSO and logs you in without a prompt?
The fact that you're getting prompted is because a) the new cname isn't considered to be in the intranet/trusted internet zone. See Internet Options > Security > Local Intranet/Trusted Sites > Sites. Or b) the requested ticket sent to the server failed.
Also usually you don't register the cname as an SPN. You register the A record the cname is pointing to as the SPN. My guess is this is causing the failure. The SPN is getting registered to the wrong service account so the KDC is using the wrong service account key.
Can someone please help me with the following
Assume I have an AD Domain and a 'standalone Linux host' which is not joined to the AD domain and there is no trust relationship in place between the AD and Linux of any kind.
Next I have a Kerberos aware application running on the Linux Server (WEB Server for example or other app) which is .
In order to an AD user to authenticate to the Linux hosted WEB/App using a KeyTab file
(created in Windows and setup on Linux). Does the Linux host need to be AD-Joined, in order to keyTab (single sign one) authentication to work?
Meaning if the Linux server was never joined to any domain of any kind (standalone), Would I still be able to user a KeyTab file to authenticate a user coming in from an AD Domain?
Thanks all
Charlie
I have created a Tableau site for trial basis.
I do have all privilege for my site.
How do I get server administrator right on Tableau Online?
You can get a brief idea of server and site administrator from below link
https://onlinehelp.tableau.com/current/server/en-us/sites.htm
The server administrator sets up Tableau Server—they install and upgrade it, configure the services that run on Tableau Server, back it up, and perform other tasks that pertain to running Tableau Server as a whole. Server administrators also create sites as needed. (Site administrators don't have permissions to create sites.)
On local tableau server I am aware of server administrator. For Online tableau I am not aware of server administrator.
i have a weird thing going on. I have configured a website to use windows authentication. Now when i check on a client in a domain or on my domain controller i can access the website after entering my credentials. But on the webserver itself i can't login with these same credentials. Is this normal behaviour or what can cause this to happen ?
Whenever I connect to customer site with Citrix Xenapp it takes me around 15-20 minutes for the Remote Desktop Prompt to come up, while for other users it's almost immediate. My connection is faster than theirs(25/4mbps). What is Citrix XenApp doing that's taking mine so long- any guesses?
The IT person at the customer site, said it's because my profile is over 1gb. What is "my profile"? They haven't been able to tell me that. They said I should "clear stuff off my desktop". Whenever I clear my things off the desktop at the customer site, it comes back the next time I login - like undeletes. Are they talking about desktop on their server, or on my local machine?
Thank you for any tips!
The profile being referred to is your Windows Roaming Profile. The most esstenial part of the roaming profile is ntuser.dat, which contains registry information for that user. It also can contain a large amount of data stored in system folders such as the Desktop or My Documents if folder redirection is not enabled.
So what happens when you try and open RDP from the XenApp server is that server requests your roaming profile from another server on the backend and downloads a local copy to the XenApp server. The profile is not sent to your local computer. The beauty of XenApp is that you only see compressed screen updates. So if the XenApp farm is well designed, your roaming profile is on a LAN server on the backend so the roaming profile can be accessed very fast.