Support

Go to the table of contents Go to the previous page Go to the next page Go to the index View or print as PDF
Security > Proxy user authentication > Multiple realm authentication > Multiple realm authentication: Domains
Multiple realm authentication: Domains
Help | Content Gateway | Version 7.7.3
Before you can create an Integrated Windows Authentication realm rule, you must join each realm's domain.
 
* 
Important 
All clients to be authenticated in a given domain must be joined to that domain.
To be able to join a domain:
*
Content Gateway must be able to resolve the domain name.
*
Content Gateway system time must be synchronized with the domain controller's time, plus or minus 1 minute.
*
The correct domain Administrator name and password must be specified.
*
There must be TCP/UDP connectivity to the domain controller(s) (ports 88, 389, 445).
*
If backup domain controllers are configured, they and their Kerberos Distribution Center (KDC) services, must be reachable by Content Gateway on the network.
To join a domain:
1.
Navigate to the Configure > Security > Access Control > Integrated Windows Authentication tab.
2.
In the Domain Name field, enter the fully qualified domain name.
3.
In the Administrator Name field enter the Windows Administrator user name.
4.
In the Administrator Password field enter the Windows Administrator password.
The name and password are only used during the join and are not stored.
5.
Select how to locate the domain controller:
*
Auto-detect using DNS
*
DC name or IP address
If the domain controller is specified by name or IP address, you can also specify backup domain controllers in a comma separated list, no spaces.
6.
Confirm the Content Gateway Hostname.
 
* 
Warning 
The hostname should not be changed after the domain is joined. If it is changed, IWA immediately stops working and will not work again until the domain is unjoined and then re-joined with the new hostname.
7.
Click Join Domain.
The Joined Domains section maintains a list of joined domains, and controls for unjoining and changing the method of finding a domain.
The Active Domain Controller Connections section lists the currently active domain controller connections.
For troubleshooting tips, see Failure to join the domain.
To unjoin a domain
In the Joined Domains section, select the domain you want to unjoin and click Unjoin Domain.
To change the way the domain controller is found
1.
In the Joined Domains section, select how to locate the domain controller:
*
Auto-detect using DNS
*
DC name or IP address
If the domain controller is specified by name or IP address, you can also specify backup domain controllers in a comma separated list, no spaces.
2.
Click Apply.
Print print article Email email article Font Size: A A

Search

Article Rating:

Do you have any additional feedback?    Email: close

Related Articles

Quick Links

Service Requests

How are we doing?

Provide us feedback on your experience with the Service Request portal.

provide feedback >

Go to the table of contents Go to the previous page Go to the next page Go to the index View or print as PDF
Security > Proxy user authentication > Multiple realm authentication > Multiple realm authentication: Domains