This article applies to:

• WebMarshal 6.9 and above
• Windows operating system clients

Question:

• Authentication problems when using Skype or iTunes through WebMarshal 
• Authentication problems with browser helper applications

Background:

In certain circumstances, browsers and browser plug-ins on Windows operating systems fail to authenticate with the Proxy. This may be due to an incompatibility, or simply software that does have proxy settings but does not provide for authentication.

The WMProxyLogon mechanism described here is a simple workaround designed to overcome this limitation in the client software. It is not limited to the named clients and could be used anywhere that a similar problem occurs.

Procedure:

WebMarshal includes a small utility called WMProxyLogon.exe. In earlier versions, this utility is used to allow NDS users to authenticate. In WebMarshal version 6.9 and above, this program also works with all Windows logins.

• This utility runs on the user workstation.
• By default the utility uses the current Internet Explorer settings so if Internet Explorer is not properly configured the logon procedure will not work. To override these settings see Options below.
• If this program is added to the logon script it will run as a system tray icon and periodically inform the proxy server of the active Windows (or NDS) logon. While this program is running the user will not be prompted for authentication for any applications.
• You do not need to make any change on the WebMarshal server.

Usage

WMProxyLogon.exe runs on the client workstation. Typically this software would be included as part of the user logon script for some or all users. The program is small enough that it can be run from its location on the WebMarshal server. Double-click the system tray icon to see the current user information and/or exit from the program.

Options

WMProxyLogon.exe has the following command line options:

/?

Shows help information.

/Proxy:<server>:<port>

Overrides the system settings and forces WMProxyLogon.exe to communicate with the stated proxy server. Note that the browser must still be configured correctly to use the proxy server.

/NoIcon

Disables display of the system tray icon.

Notes:

• This solution allows access for ANY software running on the workstations that can use a proxy server (subject to WebMarshal Rules that control access).
  
  • Potentially unwanted applications could also be allowed by this solution.
• For another solution that can provide more granular control, see Q12734: Configuring the Authentication Bypass Cache