SITUATIONOur users conect to internet using a proxy that is integrated with Active Directory. This means that when a user opens his browser, the proxy takes the actual windows credentials to allow or deny internet browsing.
In notes client we also have to setup the proxy because, if we don’t setup this proxy, remote images inserted in email messages are not showed.
PROBLEM
The problem is that, when Notes client tries to retrieve remote images embedded in messages from Internet, it connects via the proxy… but always asks for the username and the password. I have seen that we can type a username and a password in the proxy settings of Notes Client… but this password is changed by users each month… then this is not the best way to achieve our goal.
QUESTION
Is there any way to force Notes client version 6.5.4 to send windows network credentials to the proxy server?
Thanks in advance.
Alberto.
Subject: Notes proxy settings and Active Directory integration
First thanks to both for your answers: they had been quite helpful.
Maria,
Setting a Single Sing On system will be time consuming and a solution bigger than the “problem”. I’m sure this will be the better solution, but we have to open a special project for this.
JYR,
I’ve been reading the documents you indicate and, apart from acussing Microsoft of the use of “propietary protocols” (does IBM makes a different thing???) it does not give a solution to the problem. You can store the username and password in the prosy settings of the connection document… but when the user changes it’s password (required in our domain) it fails.
WORKAROUND
Our proxy is the Trend Micro InsterScan Web Security Suite, that is really an antivirus for Web browsing. Obviously ALL the internet connection MUST pass across this antivirus.
This antivirus is able to work simultaneously in authenticated way (usin Active Directory accounts, for example) and in anonymous mode (to allow guests in your network to browse accross the proxy).
It uses a different TCP port for each “authentication” method:
IPADRESS:8080 for authenticated browsing.
IPADRESS:8081 for guest browsing.
What I’ve done is to set the proxy in Notes connection document to the IP of the proxy and the TCP used for guests browsing. In this way the Notes client retrieves the images from internet (using perweb) via the proxy in “guest” mode.
The authenticated method should wait until SSO or until Microsoft and IBM (both) accept that their products MUST work together.
Regards!!
Alberto.
Subject: Notes proxy settings and Active Directory integration
Have you looked into using Single Sign-on? I would think that would solve the problem.
Subject: RE: Notes proxy settings and Active Directory integration
You will probably have your answer here:
Troubleshooting Internet HTML e-mails with images appearing as red Xs
http://www-1.ibm.com/support/docview.wss?rs=899&uid=swg21110585
look for this section:
CASES WITH AUTHENTICATED PROXIES
The following case is only for cases in which authenticated proxies are involved.
JYR