UNSOLVED
Avamar DTLT pass-through AD authentication
hello
I have an issue with DTLT authentication in AD pass-through mode. On some clients after click for "Restore" on avamar icon in tray browser is opening and unfortunately login screen appear and user have to put password. In same time on other clients after click for "Restore" there is no login screen and users could automaticaly browse their backups - this what customer needs.
I already checked this behaviour on diffrent machines, OS, internet browser ( IE, mozilla ) and versions. I already read in documentation that information about mode of authentication is send by server in time of backup, so I checked it but unhappily Issue is independent of these factors.
Of course avamar agent, client machine were restarted. Once again activated and so on...
1. Does anybody know where on client machine avamar keep information about authentication mode ? or how to refresh this configuration and where in generally avamar client keeps information for example which browser to use ?
Hi Ernesto,
Pass-through authentication requires information that is attached to backups generated by Avamar client, version 6.x and later. With pass-through authentication enabled, a user with at least one backup that was created by a pre-6.x version of Avamar client will continue to see the login screen. After all pre-6.x version backups expire, the login screen will no longer appear, So what is the Avamar versions you are using on your clients ?
Thanks,
Ahmed Bahaa
Hi ernesto,
Pass-through authentication uses encrypted channels to transmit and associate Windows or Mac user account information with file ownership properties. Windows and Mac users are able to restore files th at they own, without logging in through the Avamar Desktop/Laptop login screen. On Windows, if those users have local administrator privileges they are able to restore files owned by anyone on the computer without additional login.
So if Pass-through authentication is enabled with OS Windows or Mac and user logs in with a local (non-domain) account, Login will be required. What is the users permissions and account you use for logging ?
Thanks,
Ahmed Bahaa
Hi ernesto,
Make sure that your clients are one of the following versions of windows :
• Windows 7 Home Premium
• Windows 7 Professional
• Windows 7 Ultimate
• Windows Vista Home basic
• Windows Vista Premium
• Windows Vista Enterprise (32- and 64-bit)
• Microsoft Windows XP Professional (32- and 64-bit)
• Microsoft Windows XP Home
Also as you are using pass-through authentication, the login screen should be disabled, Is it disabled ?
Which Authentication method you are using ? LDAP with Kerberos encryption ?
Thanks,
Ahmed Bahaa
Hi
All client machines have windows 7 professional.
As far as I know pass-through authentication could be enabled/disabled by turning on/off login screen. I made this by avldap --configauth
and answering for questions:
Do you wish to enable DT/LT login screen (Y/N)?
n
So login screen is disabled.
Yes, I am using LDAP with Kerberos
Thanks,
Ernest
Hi Ernest,
Is there any difference between the operating systems that dont show the login screen and the other machines that use pass-through correctly ? I mean the OS language , are you using other than English language ? Also would you please check that you are using a JavaScript-enabled web browser.
The supported Web browsers on Windows are:
• Windows Internet Explorer versions 6.x.x, 7.x.x, 8.x.x,and 9.x.x
• Mozilla Firefox 3.x.x
Would you please check the JavaScript-enabled, OS language and browser version ?
Thanks,
Ahmed Bahaa
ernesto2
17 Posts
931
0
Posted March 12th, 2012 04:00
hi
thanks for Your interest
It is quite new isntallation, so the only version of avamar client/server is 6.0.0-592 and it is the some in whole environment. There is no backups created by older version because it was never used.