Поиск в Поддержке

Избегайте мошенников, выдающих себя за службу поддержки. Мы никогда не попросим вас позвонить, отправить текстовое сообщение или поделиться личной информацией. Сообщайте о подозрительной активности, используя функцию «Пожаловаться».

Learn More

Proxy not working

  • 6 ответов
  • 0 имеют эту проблему
  • 32 просмотра
  • Последний ответ от Mike Kaply

more options

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or Edge. When the user tries to browse external sites, the proxy sends the error page "You need to authenticate to use this service". It seems that Firefox does not pass user authentication to FortiGate. The proxy authenticates users per session via Kerberos tickets.

Firefox version: 115.5.0esr

I also performed the following settings to pass the Kerberos ticket to the proxy without success: https://people.redhat.com/mikeb/negotiate/

I also noticed that it is not possible to change the "network.negotiate-auth.allow-proxies" setting from "false" to "true." Is this my problem? Is it normal that it cannot be changed?

Attached are the settings.

Thank you in advance.

Hello, from Terminal Servers, it is not possible to browse the Internet via FortiGate's explicit proxy from the Firefox browser, while there is no problem with Chrome or Edge. When the user tries to browse external sites, the proxy sends the error page "You need to authenticate to use this service". It seems that Firefox does not pass user authentication to FortiGate. The proxy authenticates users per session via Kerberos tickets. Firefox version: 115.5.0esr I also performed the following settings to pass the Kerberos ticket to the proxy without success: https://people.redhat.com/mikeb/negotiate/ I also noticed that it is not possible to change the "'''network.negotiate-auth.allow-proxies'''" setting from "false" to "true." Is this my problem? Is it normal that it cannot be changed? Attached are the settings. Thank you in advance.
Приложенные скриншоты

Все ответы (6)

more options

It definitely should not be locked and it should default to true.

What do you see when you go to about:policies?

Полезно?

more options

It was a nested GPO that blocked that function. Now it is enabled but still the user does not pass authentication to the proxy. The same settings on a Laptop allow browsing Internet via proxy.

Полезно?

more options

So you're saying the exact same configuration works on one machine and not the other?

Полезно?

more options

The same configuration (Firefox version + proxy settings) works on any server/client, but does not work on a Terminal Server virtual machine (on which several users are connected at the same time).

Полезно?

more options

I think this might be a case where opening a bug in bugzilla is the right thing.

This isn't enterprise specifically but seems to be a problem with networking

https://bugzilla.mozilla.org/enter_bug.cgi?product=Core&component=Networking

Полезно?

more options

Were you able to open a bug?

Полезно?

Задать вопрос

Для ответа на сообщения вы должны войти в свою учётную запись. Пожалуйста, задайте новый вопрос, если у вас ещё нет учётной записи.