- Pulse Secure Community
- :
- About spanudiez_
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
since
10-29-2017
10-29-2017
spanudiez_
Occasional Contributor
17
Posts
0
Kudos
0
Solutions
03-03-2015
02:10:AM
Hello, I use double authentication with AD and Radius. The radius is not connected to the AD. Is it possible to send an AD Attribute to the Radius server isteand of the AD username? Thanks, Diez
... View more
02-24-2015
07:10:AM
Hello, I authorized a web application : web.sso.com with sso policy to eu-portalsso.com, domain EU. The users are able to acces the application and SSO works correctly. However from the web.eu-sso.com application I have several links to Africa applications : web2.aff-sso.com with sso policy to aff-portalsso.com. I configured a different SSO policy for the aff web aplications and authorized the application. The users are able to access the aff-web however the SSO doesn't work, so they have to retype their credentials. There's a trust between the EU and AFF domain. SSO for aff-web application works correctly if I create a different bookmark on the juniper SSL VPN portal. Is the juniper SSL-VPN unable to do SSO for a web applications if the web app is not accesed directly from the SSL VPN main portal? Thanks, Diez
... View more
02-16-2015
06:37:AM
Thank you, That's exactly what I needed, however, can I change custom messages only for a single role? Regards, Diez
... View more
02-16-2015
06:20:AM
Thanks for your answer, however I do not wish to change those messages, but this one : EDIT: Please ignore, I haven't seen the last message while posting this, checking on my SA.
... View more
02-16-2015
12:27:AM
Hello, Whenever the user clicks on an unauthorized URL he receives the Juniper error message. You are not authorized to access https:// etc, please contact your administrator. I wish to change this page but I can't find any trace of it in the sign in pages. Where exactly am I able to modify this page? Thanks, Diez
... View more
01-20-2015
12:22:AM
Still looking for answers, no Host Checker, not a single limitation in realm configuration. Also I emphasize the fact that if there's no certificate store, the user has no access issue.
... View more
01-15-2015
07:43:AM
Hi Braker, Thank you for your post. I do not have any certificate limits. The following radio button is checked : Allow all users (no client-side certificate required) Also, it asks the user for certificate when Network Connect launches and only if a certificate card is inserted in his workstation, otherwise it doesn't ask for anything and it launches with no issues whatsoever. Diez
... View more
01-14-2015
11:53:PM
Hello, I have a realm with two authentican servers configured, the 1st one is LDAP and the 2nd one is a Radius Server. All users are able to autenticate without any issues on this realm unless they have a certificate token in one of their usb port. If they have a token insterted, when Network Connect launches (after the secondary authentication with Radius), the user is prompted to select a certificate from his certificate list. He selects whatever certificate and after a certain delay he's able to use his full access. Checking the logs on my secure access, I can see that after my configured authentications, the secure access tries to authenticate the user based on certificate as well, and of course it fails. This step is not there if the user doesn't have a certificate inserted in his usb ports. Anyone knows how can I disable this check, and make the Secure access ignore the user usb port for this particular realm? Thanks, Diez
... View more
09-09-2014
05:27:AM
Hello, How does the url_x number in dana-na/auth/url_x/welcome.cgi gets generated when you have multiple SM clusters? I was under the impression that url_1 stands for the 1st sign-in policy after the default, url_2 for the 2nd and so on, however I now see that the numbers are different between clusters (url_5 is equivalent to url_7 sometimes). Is the incremented depending on the appliance number in the cluster? I couldn't find any info on this on the Internet, if anyone can answer I would be grateful. Thanks, Diez
... View more
06-24-2014
07:43:AM
Hello, I'm currently using 2 different servers (AD and Radius) to authenticate users with custom pages. If the first authentication fails then it says : invalid primary user or password. If the 2nd authentication fails it says invalid secondary user or password. I want to change these 2 messages but also to keep them different (ex. : Radius authentication failed, AD authentication failed) If I use the error code 1002 in the login page then I can change these two messages but both of them become the same custom messages. Is there a way to keep the two error message but customize them? thanks, Diez
... View more
04-22-2014
07:05:AM
Thank you, I managed to change the text but I can't seem to switch the first password to hidden. This is what I tried: <% FOREACH prompt = prompts %> <%IF prompt.promptText == "username" %> <% SET prompt.promptText = "Username" %> <%ELSIF prompt.promptText == "password" %> <% SET prompt.promptText = "TBD" %> <%ELSIF prompt.promptText == "Additional password" %> <% SET prompt.promptText = "Password" %> <% END %> <%NEXT IF !prompt.required %> <%IF prompt.promptText == "TBD" %> <input type="hidden"> <%ElSIF prompt.promptText %> <input type="<% prompt.type %>" name="<% prompt.name %>"> <% END %> The TBD is still not hidden. Because we have some weird requirements I have to use additional auth servers, however I only need to send the username to the first one after I get authentificated to the second one with the same user and a password. I can do this easily however the password "requirements" of the first one always adds the extra pass box on the login page. I cannot do the other way around because of the company policies. Any ideas what's wrong with my code? Thanks, Diez EDIT: In reply to muttbarker I do not want to modify username 1, I only want password 1 to be hidden (input field and label)
... View more
04-22-2014
05:17:AM
Hello, I'm trying to modify the login page on a SA6500. Currently I have Username, Password1 and Password2, I would like to hide or delete the Password1 label and field however I do not find anything in the loginpage.thtml. I would also like to change the label of Password2. Any help will be appreciated Ty, Diez
... View more
04-05-2013
07:10:AM
Hello, I'm looking for more information on DSSignInURL cookie. One of our applciations is calling a server in order to visualize a PDF file (Juniper SA 6000) and sometimes the visualization page is all blank. I have noticed that when the the GET request passes through Juniper it sometimes adds the DSSignInURL cookie. The get always works well when the cookie is added and the vizualisation is blank when the cookie is not added. I have searched the web and wasn't able to find any meaninful information on the cookie? Any help will be appreciated. Thanks, Diez
... View more
02-04-2013
04:12:AM
Hi Jay, That's exactly how I do it, but this was not a configuration question. I don't understand why for my situation, even when WSAM is up and running, the URL is rewritten in the initial page. Example : resource www.intranet.com, set as bookmark, WSAM well configured, no rewriting for this particular destination. If I click the bookmark from the initial landing page, the link is rewritten even if WSAM is in connected status, there's no WSAM session. If I open a new browser window, WSAM is working properly, a session is starting for the www.intranet destination and there's no more rewriting, however I always have to open a new browser window to do that, it never works from the initial page. This happens from all my workstations and only for this particular resource which was configured exactly as my other resources with WSAM destination. Has anyone ever encountered this behaviour, is there something I can do to make wsam work from the initial browser window? Thanks, Ionut
... View more
02-03-2013
11:29:PM
Hi, I'm using an SA6500 and I crated a resource for an intranet site that doesn't support rewriting so I'm using WSAM destination. After logon, Host checker starts properly and WSAM is blue and connected, the ip/site destination appears in the destination list however if I navigate to the site, the rewriting still works and WSAM doesn't start a session. If I open a new browser window and navigate to the same site, a WSAM session starts and there is no more rewriting, wich is exaclty what I want from the initial browser window (same behaviour with both firefox and ie) Has anyone ever encountered this issue, is there any way to fix this? For all my other resources WSAM works well with the initial browser window. Thanks, Ionut
... View more
01-01-2013
03:51:AM
Thank you, you were right. I realized my SA wasn't looking in nested groups. Thank you for making me check the LDAP conf
... View more
01-01-2013
12:19:AM
Hello, I have an AD group (AD_Large_group) based on which I have role mapping. It works well for all its members, however I now added a subgroup (AD_Small_group) within the large group. Whenever someone from the subgroup tries to connect there's no role mapping. In user access it says "no roles" although there's a role map for the large group which contains the small one. In policy trace it tells me that there's no match on the role mapping policy. I also tried adding Large group or Small group in the rule, but I get the exact same results. Is it actually possible to do role mapping this way? The SA can check rule matching based on sub groups? Thanks, Diez
... View more
Latest Tags
No tags yet
© 2017 Pulse Secure, LLC. Use of this website assumes acceptance of our Legal Notices and Privacy Policy.
Pulse Secure has updated its Privacy Policy effective June 28, 2017.
