About RadiusWorldwide_

RadiusWorldwide_ · ‎08-05-2014

I got it almost working now. If I'm connected to the company LAN or have no connection the Junos Pulse starts but does nothing. As soon as I have an internet connection the tunnel is built. So the always-on works. So do I get it right, that if I'm not able to connect via VPN directly at the log on but later instead, that I'm then not able to pass on the user credentials of the currently logged on user? I think I get at least the user account name right, since I see it when Pulse pops up in the domain synthax DOMAIN\username. But the password is missing. I wonder if there's a workaround to get the password filled out as well. Is it maybe stored somewhere in encrypted form?

RadiusWorldwide_ · ‎08-04-2014

Sorry for dragging this out, but I'm having trouble configureing exactly that using the Pulse client. I want to pass on the cached Windows credentials. However, Pulse should not try to connect when the laptop has no internet connection or is on the corporate LAN. Ticked the "At user logon" and at least the client steps in after I provided my Windows credentials but it says "No log on sevrer available" when I have no internet connection, well duh.. of course not, hehe. When I'm on the LAN it asks me for proxy credentials. So how can I configure this Always-On? I'd be happy if someone could point me to a knowledgebase article or something like that since I cannot find anything useful unfortunately. Edit: Got the Always-on function working based on endpoint IP. Still Pulse won't take over the AD Windows cached credentials. Arg. Any common pitfalls?

RadiusWorldwide_ · ‎08-01-2014

I installed the Pulse client manually with msiexec providing a config file with the "Automatically at user logon" option enabled and rebooted. Indeed the client tried to connect just after I provided my credentials. The login was still branded with windows though. I wouldn't mind that. But I got an error message from the client saying that the logon server was not available. Of course not, because I wanted to test using the cached credentials. It works fine when I just log on to Windows. Even without any network connection. So how is this done then? I'm confused and frustrated. I just want the client to grab the Windows user credentials provided at log on to the machine, but only try to establish the VPN when the machine has an internet connection. It should not try to connect when there is no connection or a company LAN connection. What can I do?

RadiusWorldwide_ · ‎07-30-2014

Hi Filbert, thanks for your suggestion. Sounds like this might be exactly what I was looking for. Ticked the "Automatically at user login" in our Junos Pulse Connection and downloaded the client again. Unfortunately nothing at all happens. I just get a normal Windows login and Pulse starts afterwards. Need to troubleshoot this. Also will I still just log in with my cached AD credentials although the login it now branded with Pulse (If I get that to work.)? What if I don't have a internet connection at that moment?

RadiusWorldwide_ · ‎07-28-2014

I'm just requesting the user cert manually via the dialog in an mmc. When I hit details and choose UPN for the alternative subject... no matter what I put into the "Value" field... it will always be the same. [email protected] This won't work with the ressources I configured like access to fileshares or internal websites. Looking at the user logfiles when I login via AD authentication I see a different notation for the username. It's domain\jdoe. Maybe I can do it the other way around then? Somehow (how???) pass on the user credentials from the Windows login to pulse client and user AD authentication and role mapping and have host checker check for a valid cert? So far we're not using certificates for users in our AD anywhere. I just want to use it as a means of logging in to the company network while outside our premisses.

RadiusWorldwide_ · ‎07-25-2014

Hello, been reading a lot these days about certs and SSO but cannot find a way to configure what is needed: What I want to do Users log on to their laptops with a cached AD domain user account. the Junos client starts automatically and connects via a user certificate stored on the laptop. Afterwards some AD role mapping takes place and users can acess files shares, intranet etc without any further need to put in credentials. What I accomplished so far version 1 Have users login to Junos with AD credentials, get roles mapped, get access to internal ressources. version 2 Get a user cert from our AD cert server and login automatically via Junos client. But access to internal ressources asks for credentials again as the user name in the cert is like "Jane Doe" where I need it to be "jdoe". How do I... Get the correct user name into the certificate? Tried to put it into the Subject field manually when requesting/issuing the cert, but that just didn't end up in the cert. OR Somehow pass the user credentials from the laptop Windows login on to the Junos client?

Re: Netconnect Always On

Re: Netconnect Always On

Re: How to pass on user name for SSO login with ce...

Re: How to pass on user name for SSO login with ce...

Re: How to pass on user name for SSO login with ce...

How to pass on user name for SSO login with cert a...