Unwanted Auth. PopUps

Hello Community,
shortly after having implemented a pair of S650s we started to run into problems with unwanted auth. popup windows that would appear every now and then.
Even though we have already opened a ticket and the Support Team is working hard on getting the issue resolved I'd still like to share our experiences with the rest of you to see if anyone else has run into a similar problem yet.
The scenario:
- Two S650s running in "failover-mode" by a hand-made wpad.dat file, running version 5.5.2-027
- placement: DMZ subnet connected to a Juniper SSG550M firewall, currently allowing ANY service to the AD/DCs
- authenticatin is based on NTLM(SSP)
- AD/DCs running on W2k3 in native mode
- testauthconfig runs fine every time we test it, the only hickup being a "High Latency: (0.261s) for <coro>" when we run it on the CLI.
The problem:
Most of the time web browsing seems to work just fine, but after an undefined amount of time auth. popups appear left and right when clients or apps try to access the web. In case the user is too fast in hitting the "cancel" button an proxy auth. error is being displayed, but if he waits 2-3 seconds he can just click cancel but the site is still being displayed after the user was properly authenticated.
So far we haven't been able to find any errors in the AD logs that might give a clue about why authentication didn't work for a split second. Our last hope was the upgrade to the latest release that seems to have fixed a few issues around NTLM, but since it didn't help in resolving the issue we might have to start all over again.
Now I am curious to see if anyone else has experienced a similar issue yet.
Torsten

Testing is being done by 5-10 users right now. So nothing that could bring the system anywhere close to being overloaded (at least I hope so).
Output from the proxystat usually looks like this, even though it's hard to get a reading from when the errors occur, since they happen so randomly.
%CPU reqs client server %bw disk disk
used /sec hits misses kb/sec kb/sec saved wrs rds
0.56 0 0 0 0 0 0.0 0 0
0.62 0 0 0 0 0 0.0 0 0
0.80 0 0 6 6 0 100.0 0 0
0.75 0 0 0 0 0 0.0 0 0
0.54 0 0 0 0 0 0.0 0 0
0.77 0 0 0 0 0 0.0 0 0
0.56 0 0 0 0 0 0.0 0 0
0.69 0 0 0 0 0 0.0 0 0
0.77 0 0 3 3 0 100.0 0 0
0.69 0 0 0 0 0 0.0 0 0
I am not 100% sure about the AD setup, but will find out.
EDIT: Domain Controllers run on Win2003-32bit SP2 on IBM servers with 4x Xeons (E5320 @1.86Ghz) and 2GB of RAM
-T

Similar Messages

Login via Basic Auth popup

Hi, i have sap fiori running and i need GBAPP_PRAPPROVAL service to display basic authentication prompt.
Currently i have configured global settings to use the class CL_SRA_LOGIN.
I modified the system logon on the Error Page tab and i am able to display the login page that says "via popup" in the textboxes and then click to show the popup but i don't want the page to appear at all, i want only the http basic auth popup directly when you access the url of the service. How can i achieve this?
Thanks!
Andres

Could you please paste a screenshot about what would you like to achieve?

Unwanted Browser Popups in Windows 8

In Windows 8, while connected to the web, I receive unwanted popups containing adware with the url beginning with nym1. Why does this happen and how do I eliminate it?

Hi,
Also turn on Pop-up blocker and set the level to high.
Juke Chou
TechNet Community Support

Unwanted iSync Popup

I used to have non-apple cellphone which I synced using "MissingSync". Since I now have an Iphone I stopped using and (in theory) unloaded "MissingSync".
But I cannot stop Isync from popping open every hour or so with a useless and irritating message such as
"Monday, August 2, 2010 3:11 AM
[Gareth Cellphone] Connection to the phone failed.
Please make sure that your phone is turned on. If this error occurs again, please restart your phone.
Device “Gareth Cellphone” synchronization failed.
Since I no longer use "Gareth Cellphone"; how can I stop Isync from popping up?
I should mention that
1. when I click "Devices" in iSync the phrase "Remove Device" is greyed out.
2. I tried reinstalling and uninstalling "MissingSync" but the problem persists.
Thanks

Have a look in the ~/Library/Phones/ directory and delete your old cell phone from there if it still exists.
If not, contact MarkSpace as they would be the best people to advise about their products.

Unwanted Network Login Popup

After default Companion installation (and upgrade to 1.6, all on Windows 2000), I've got an unwanted popup Network Login screen even before I can get to the:
http://machine_name:7777/pls/htmldb
I can satisfy this additional login popup by providing a valid database credentials (e.g. system/manager), however it's annoying to have unwanted login popup that does not serve any purpose. Thanks. VR

hi vr--
there's more on mod_plsql DAD configuration in section/chapter 4 of the htmldb 1.6 installation guide, but the install you describe places your dad named "htmldb" in the file $ORACLE_COMP_CD_HOME/Apache/modplsql/conf/marvel.conf. as scott suggested, it sounds as if you don't have a valid username/password in that DAD. you'd want to put htmldb_public_user in for that user and his valid password, as well. check the install guide if then you need to obfuscate that password.
hope this helps,
raj

EP6 and BW Query iView - unwanted logon screen - Help please

Hello,
I have a BW Query iView.
I noticed that EP6 authentication works for query contents (logon method to BW is UIDPW plus user mapping) but I get an unwanted auth login window as soon as static content arrives from BW.
I mean... the query is coming from http://mybwhost:8000/sap/bw/BEx (and no auth logins are shown) but when requests for static content like
http://mybwhost:8000/sap/bw/Mime/BEx/Icons/checked.gif start then I get one.
I think is a BW setting (shall /sap/bw/Mime/* be set without authentication?)
Any further hints are welcome.
Vitaliano

READ SAP NOTE 593640 (Logon Screen when calling BW Web Application in portal)

My Finder menu, HD, and dock all disappeared after I mistakenly downloaded a bogus version of Firefox. How do I get them back?

I think I may have gotten some sort of virus after downloading a "bogus" Free version of Firefox. I uninstalled Firefox immediately, because I noticed my Macbook was acting strangely, but the next time I turned it on, my HD, Finder menu, and dock were all gone! Basically there is now an empty, blue screen. I have booted in safe mode and deleted preferences, but nothing is working.

kimaward wrote:
. Plus, I didn't download it from the Mozilla website :--(
This probably is the mistake you made. Many sites that offer application downloads also include adware as an unrequested 'bonus'. Try AdwareMedic and it should take care of the unwanted ad popups:
http://www.adwaremedic.com/index.php
If no success, the use the Apple support procedure, which is a lot more complicated:
https://support.apple.com/en-us/HT203987
The lesson is, always download from the developers web site or from the APP store. That way no unwanted items will not be included.
Ciao.

Cannot catch Exception thrown by ADF (source of exception is EJB)

Even I tried to use try catch block, it still shows unwanted error popup (showing errors) automatically generated by adf.
I know the source of this error is EJB, I try to insert duplicate field which must be unique. So EJB throws jdbc exception.
How can I disable popup automatically generated by ADF and show my custom error text?
        try {
            BindingContainer bindings = getBindings();
            OperationBinding operationBinding = bindings.getOperationBinding("mergeCity");
            Object result = operationBinding.execute();
            closePopup(popEdit);
            refreshTable();
            if (!operationBinding.getErrors().isEmpty()) {
                return null;
        } catch (Exception e) {
            System.out.println(".......... Error..........");
        }        Edited by: user12025867 on Oct 10, 2009 11:17 AM

For custome error handling check this thread.
Handling custom exceptions in 11g
if you call this on button action, do not use partialSubmit that way when the page refreshes the popup will be gone automatically.

ADFS3.0 - WIA returning 404 externally

Hi,
Interesting scenario:
ADFS farm behind a load balancing cluster for internal and external connections. Works as expected internally.
Windows auth used for all standard browsers, internally and externally.
No ADFS proxies
Domain joined laptop "working offline" at a remote location, running W7SP1Entx64.
When the laptop visits the ADFS signon page directly, it sees the standard page with a "sign in" button. Clicking the button doesn't log in as expected with SSO but simply returns (immediately) a standard 404 (page cannot be displayed).
If "Enable Integrated Windows Authentication" is turned off in IE, following a browser restart, everything starts working.
If the machine is connected to the domain (VPN), everything starts working as expected.
If the machine WAS connected to the domain, everything works as expected until it is rebooted.
This behaviour persists through multiple browsers.
This behaviour persists on multiple clients, including 8.1.
Non-domain-joined clients are unaffected (windows auth popup box).
It seems like the client is failing to negotiate windows auth when not domain-connected, and if windows auth is unavailable entirely, it falls back to basic perhaps? I don't want to turn off windows auth because I expect that will break other systems
which rely on it.
If this is the case, can I turn off windows auth within ADFS in favour of basic? Forms is not an acceptable answer.
TIA
Rob

Robin is spot on. WIA won't work over the Internet at least in a way that's not problematic for your users. Basic Auth is not support in AD FS 3.0 ... Don't read me as being criticial here Rob, but if you're going to the trouble of building an HA cluster/failover
deployment of AD FS, then it's in your best interests to use the WAP. Lately, I've seen a lot of marketing material that attempts to demysify ADFS integration by promoting the load balancer as a proxy supplement. These solutions are (largely) not integrated
from a federation standpoint, either when they implement a reverse proxy (SSL Bridging) function or from a pre-authentication standapoint using credential delegation. If you're integrating your load balancer as a SAML RP, thats another story...
http://blog.auth360.net

ITunes keep asking for credentials

Hi all, I have an IronPort S170, with latest version and updates.
We have a lot of users using itunes to sync Apple devices, the problem is that it allways asks for user & password, several times (really annoying). Can anybody help me solving this issue?
thanks a lot
Best regards.

HI Gonzalo,
I assume you're using NTLM SSO. Pending on you configuration this auth popup is created due inability to authenticate via NTLM for the specific request. It seems there are currently known problems with iTunes and NTLM auth. I found records on apple support communitate reporting version 1.6 of iTunes no longer being able to proper authenticate via NTLM. As workaround you could use e.g. IP surrogates which will keep the users IP authenticated once the first request has been authenticated, e.g. via Internet Explorer. By this iTunes will not require to authenticate again. Also your Domain Controller will be happy to have less auth request.
-Stephan

Can we setup whitelist on WLC

We have enabled web Auth for our public access on Cisco WLC 2504. It works fine. However, if a wireless user opens his email with download pictures website, he can’t get the picture download until he accept the web policy. Our users complaint about that. Here is our vendor reply.
"Our application makes requests to the internet to check for and download pictures, etc. The problem is that web requests are not permitted until a user has opened his/her web browser and attempted to go somewhere (e.g. google) so that your security system can redirect them to the authorization form where they must click the “accept” button. If the user has not done this yet, any functionality in our app that requires an internet connection won’t work because the security system is blocking the requests. Unfortunately, since they’re not in a web browser at the time, it doesn’t redirect them to the authorization page - the request simply fails since a redirect doesn’t have an effect on the application like it would a web browser. My ideal suggested remedy would be, if possible, to whitelist web requests to the server(s) where our code and/or images will live and let them get around that restriction. Otherwise, users won’t understand why the app isn’t working unless they try and open a web browser first – which is probably not something I’d expect them to do. With this solution, you could still ensure that nobody is accessing the internet at large without accepting your terms – but they could access your website as well as our application’s functionality seamlessly."
Can we setup whitelist or something like that on WLC? If yes, how?

Hi Scott,
I follow the link to create Access Control LISts (you can find my step by step setup on this page: Configure Access Control Lists on Cisco WLC: http://www.howtocisco.com/cisco/wireless/wlan31.htm ). I thought this is the solution, but it doesn’t work. The picture doesn’t show up. I also try this. When the web auth popup, I discard it and just type the website I set in the Access Control list, but it swicth back to the web auth page. What could be the problem?

Safari 5.1 breaks 1Password. Developer says APIs no longer there.

The developer of 1Password has released a very limited version of 1Password with most of its features missing for Safari 5.1.
One of the most notable is the loss of the 1Password button in HTTP auth popups. Developer says that the API that allowed him to do this is gone in Safari 5.1.
Developer also is claims that the APIs for contextual menus is gone along with other APIs that are needed to restore missing features of 1Passord under Safari 5.1.
I'm fortunate that I upgraded Safari on one of my old Macs that isn't used for work. For now I'm sticking with the older version of Safari on my work computer as 1Password is critical to my workflow.

Hi Robert ...
Might be that the extensions preferences are corrupted.
Open the Finder. From the Finder menu bar click Go > Go to Folder
Type this exactly as you see it here:
~/Library/Safari/Extensions
Click Go
Move the Extensions.plist file from the Extensions folder to the Trash.
Quit then relaunch Safari.
See if the extensions are working as they should.
Just so you are aware, the 1Password extension has caused issues in the past with not only Safari but the Mac OS X in general.
Results of an ASC forum search for 1Password extension here.

Silently merge bookmarks with deployed FireFox

Hi all,
I am trying to create a deployment for FireFox on our corporate network (still running XP).
The problem I have, there are some/lots of people who already have a manually installed version of FF installed and I need to create a deployment that "takes over" the current install, including all settings for the %userprofile%\Application Data\Mozilla\Firefox\Profiles\{FF.profile}.
Located in this path is the places.sqlite file for bookmarks. If I was to create a complete copy over/install of %ProgramFiles%\Mozilla Firefox and the above profile location, it would give a nice clean SOE install, but would over write currently bookmarked URL's.
Part of the deployment, I have been asked to provide 6 URL's in the bookmarks.
Here comes the tricky question (Google has failed me on this one), how can I silently inject 6 URL's (preferably at the top of the bookmarks) into the deployment of FF, without wiping the current bookmarks owned by the user, and still "own" the install completely?
is there a way to list them in mozilla.cfg, prefs.js or something for injection to the deployment?
Thanks in advance for any information.
Edit: even if I can run the import wizard silently, that would be ok as well.

ok guys,
here is the script I wrote (I called the exe file FirefoxBM.exe)- I hope it helps out. Sorry for the non-streamlined scripting, I am only a novice. I have included as much commenting as I thought so you know what I am doing, and there is backup/fallback options in here as well just in case it fails in anyway. I don't think this is my final version, I could not find a later version date, you might need to modify to suit your needs.
If you use this code in any way, please respect my work and leave my details in the release info at the top, and add your modify details underneath, thanks.
the hashes changed to numbers on this page, so you have to remove the dash infront to convert back to autoit code.
The Bookmarks.html file I created had the corp bookmarks in a folder called "- Corp -". The hyphen and space is above the the alphabet on the Ascii table so most of the time it should display on the top of the bookmarks the users have after being sorted.
good luck and I hope you get it to work
<pre><nowiki>-#Region ;**** Directives created by AutoIt3Wrapper_GUI ****
-#AutoIt3Wrapper_Icon=N:\SoftLib\Mozilla_firefox\28.ico
-#AutoIt3Wrapper_Outfile=..\..\Apps\SoftLib\Mozilla_firefox\FirefoxBM.exe
-#AutoIt3Wrapper_Res_Fileversion=1.0.0.0
-#AutoIt3Wrapper_Res_requestedExecutionLevel=asInvoker
-#EndRegion ;**** Directives created by AutoIt3Wrapper_GUI ****
; FirefoxBM: additions and removals ----------------------------------------------------------------------------------------------------------------------------
; Release Autoit version Author Details
; 12/10/2012 - v3.3.8.1 lrbreez - original script written to import bookmarks into FF
; End additions and removals
-#include <File.au3>
-#include <Array.au3>
opt("wintitlematchmode",2)
opt("MouseCoordMode", 1); absolute screen coordinates
Global $SoftLib = EnvGet("SoftLib"); reads for SoftLib (software library) in reg - this varibale determines if the workstation is logged on to the network. EnvGet("SoftLib")
Global $importdate = "201211"; ---------date of last imported bookmarks.html, if there is a new version of bookmarks.html, increment this value to the current date--------
Global $logging = True
Global $mff_bm = ("\Mozilla_firefox\bookmarks.html")
Global $filestring
AdlibRegister ("kill_proxy_auth") ;register kill the proxy auth popup
_check()
Func _check()
if $importdate > RegRead ("HKCU\Software\corp\Software\Mozilla", "ImportedBookmarks") And $SoftLib <> "" Then; checks reg for current bookmarks and checking for SoftLib var; if computer is logged in before running script
Call ("_insertbookmarks")
Else
If ProcessExists("Firefox.exe") = 0 then
Run("C:\Program Files\Mozilla Firefox\firefox.exe");if firefox is not running, run it
Else
Run("C:\Program Files\Mozilla Firefox\firefox.exe -new-window"); or if this being run and the above checks don't match or firefox is running and the bookmarks are up to date, run firefox in a new window
EndIf
EndIf
EndFunc
Func _log($message)
If $logging Then
FileWriteLine (@WindowsDir & '\logs\Mozilla_Firefox_bookmarks.txt', @MDAY&"\"&@MON&"\"&@YEAR &"-"& @HOUR&":"&@MIN&"."&@SEC & " - > " & $message)
EndIf
EndFunc
Func kill_proxy_auth() ;function for adlib to kill proxy auth popup, as this will cause the script to stop if the proxy is called
If WinExists ("Authentication Required") Then
WinKill ("Authentication Required")
_log ("killed proxy request")
EndIf
EndFunc
Func _InsertBookmarks()
WinSetState("Novell-delivered Applications", "", @SW_MINIMIZE)
Dim $result; var for checking on status of window being called; will store file handle of a window or the error code of window not found
BlockInput(1); block mouse and keyboard input
mousemove(1, 1, 0); move the mouse to the top left of screen to make sure current mouse location does not interfere with on screen commands
SplashTextOn("Firefox first time run", "Firefox requires an update to its bookmarks." & @CRLF & "Please wait while the corporate bookmarks are being updated." & _
@CRLF & "During this time, mouse and keyboard will not function",500,70,Default,20,16+32)
_log ("splash text")
If ProcessExists("Firefox.exe") = 0 then
run ("C:\Program Files\Mozilla Firefox\firefox.exe")
_log("run firefox"); run firefox if not running
EndIf
$result = WinWait ("Mozilla Firefox", "", 30)
If $result = 0 Then; this will check for a running firefox process, if it won't activate, kill proccess and restart
ProcessClose ("firefox.exe")
Sleep(1000)
Run ("C:\Program Files\Mozilla Firefox\firefox.exe")
_log ("Firefox process did not respond in 30 seconds, process killed and restarted")
$result = WinWait ("Mozilla Firefox", "", 30)
If $result = 0 Then
_log("Firefox did not run successfully - closing process")
BlockInput(0)
Exit
EndIf
EndIf
WinActivate ("Mozilla Firefox")
WinSetState ("Mozilla Firefox", "", @SW_MAXIMIZE); maximize firefox if currently running but minimized
$result = WinWaitActive ("Mozilla Firefox", "", 10)
if $result = 0 Then
WinMinimizeAll()
WinSetState ("Mozilla Firefox", "", @SW_MAXIMIZE); maximize firefox if currently running but minimized
WinActivate ("Mozilla Firefox")
if WinWaitActive ("Mozilla Firefox", "", 10) = 0 then
_log("Firefox did not become the active window in time - closing process")
BlockInput(0)
SplashOff()
MsgBox(48, "Firefox has failed", "Firefox has not become the active window in time." & @CRLF & @CRLF & " Please report this to IT support")
Exit
EndIf
EndIf
Sleep(500)
Send ("{ctrldown}{shiftdown}B{ctrlup}{shiftup}"); calls for the bookmarks library
$result = WinWait ("Library", "", 10)
If $result = 0 then
Send("!b{enter}"); if the library window did not call after the winwait, this sends the alturnate key commands
Sleep(200)
_log ("process could not open Library via Ctrl+Shift+B - ran fall back")
$result = WinWait ("Library", "", 10)
If $result = 0 then
_log ("Bookmarks library failed to open")
BlockInput(0)
SplashOff()
MsgBox(48, "Bookmarks library failed to open", "Bookmarks library window has not opened or responded in time." & @CRLF & @CRLF & " Please report this to IT support")
Exit
EndIf
EndIf
WinActivate ("Library")
WinMove ("Library", "", 400, 130); moves the library window below the splash text, just incase the below mouse commands are needed.
if WinWaitActive ("Library", "", 10) = 0 Then
_log ("Library failed to be active window")
BlockInput(0)
SplashOff()
MsgBox(48, "Library window failed be active", "Library window has not become the active window in time." & @CRLF & @CRLF & " Please report this to IT support")
Exit
EndIf
_log ("Library opened")
Send ("!{i 2}"); sends Alt i and i to activate import bookmark dialogue
$result = WinWait ("Import Bookmarks File", "", 10)
If $result = 0 then
opt("MouseCoordMode", 0);sets mouse move relative to window
WinActivate ("Library")
if WinWaitActive("Library","",10) =0 then
_log ("Library failed to be active window for opening import bookmark dialogue")
BlockInput(0)
SplashOff()
MsgBox(48, "Library window failed be active", "Library window has not become the active window in time." & @CRLF & @CRLF & " Please report this to IT support")
Exit
EndIf
Mouseclick("primary", 260, 45, 1, 0); mouse click over import bookmarks
Send("i"); sends i to complete library window request, so screen size or font size won't affect this script too much
opt("MouseCoordMode", 1); sets mouse mode back to relative screen
Sleep(200)
_log ("Import bookmarks did not open with Alt+i command, ran fall back command")
$result = WinWait ("Import Bookmarks File", "", 10)
If $result = 0 Then
_log ("failed to open Library window")
BlockInput(0)
SplashOff()
MsgBox(48, "Library window failed to open", "Library window has not opened or responded in time." & @CRLF & @CRLF & " Please report this to IT support")
Exit
EndIf
EndIf
;_log ("Import Bookmarks dialogue opened")
WinActivate ("Import Bookmarks File")
if WinWaitActive ("Import Bookmarks File", "", 10)=0 then
EndIf
mousemove(1, 1, 0); moves mouse back to corner (just in case)
if WinExists ("Import Bookmarks File") = 1 Then
_log ("Importbookmarks opened")
Else
_log ("Importbookmarks failed to open")
SplashOff()
BlockInput(0)
MsgBox(48, "Import Bookmarks failed", "Import Bookmarks File window has not opened or responded in time." & @CRLF & @CRLF & " Please report this to IT support")
Exit
EndIf
ControlSetText ("Import Bookmarks File", "", "[CLASS:Edit; INSTANCE:1]", $SoftLib & $mff_bm); sends URL to 'File name' in import bookmarks dialogue
Local $rdfilename = ControlGetText ("Import Bookmarks File", "", "[ID:1148]"); reads file name just filled out in 'inport bookmarks file' and sends to var $rdfilename
If @error = 1 Then; check for failure of sending URL to 'file name' input
_log ("failed to read the SoftLib, mozilla firefox, bookmarks input in Import Bookmarks File, File Name")
SplashOff()
BlockInput(0)
MsgBox (48,"Failed to Read bookmarks","The Import of Corporate Bookmarks has failed." & @CRLF & @CRLF & " Please report this to IT support")
Else
if WinWaitActive ("Import Bookmarks File", "", 10) = 0 then
_log ("Importbookmarks failed to open")
SplashOff()
BlockInput(0)
MsgBox(48, "Import Bookmarks failed", "Import Bookmarks File window has not opened or responded in time." & @CRLF & @CRLF & " Please report this to IT support")
Exit
endif</nowiki></pre>

Jquery $.ajax with auth expired: gets the login screen in popup

Im using MVC framwork and [Authorize] attribute for every control to check the security. The problem is that if the auth cookie has expired and the user clicks on a link that should open a popup using $.ajax than
i get the login screen in the popup (same masterpage in another masterpage)
instead of redirecting the whole page to the login screen
anybody knows how to fix this ?

Hello,
This should have been asked in the
ASP.Net MVC forum on forums.asp.net.
Karl
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer.
My Blog: Unlock PowerShell
My Book: Windows PowerShell 2.0 Bible
My E-mail: -join ('6F6C646B61726C40686F746D61696C2E636F6D'-split'(?<=\G.{2})'|%{if($_){[char][int]"0x$_"}})

Removing unwanted popups on os 10.10.1

Help please!
Every time I do a search or click on something, an unwanted popup appears. I have tried to remove these by going into my preferences, but no luck.

Force quit Safari if required, then reopen while holding the Shift key.
Check the links below for options to remove the Adware
http://www.adwaremedic.com/index.php
Remove unwanted adware that displays pop-up ads and graphics on your Mac - Apple Support

Unwanted Auth. PopUps

Similar Messages

Maybe you are looking for