scdladmin

Q: Active Directory authentication to Server Website fails

Mac Mini bound to AD domain.

I can successfully log onto the mini using domain credentials.

 

Server.app 5.0.15 installed.

With Website service off, I configure the default Website and set 'Who Can Access' parameter to 'A specific group'.

In the Access Group window, I have tried using either Domain Admins, or a local group that contains the each of those Domain Admins as members.

I have tried this setting on both the secure and unsecure site in Websites configuration - as well as both at the same time.

Save and start Website service.

 

Have tried browsers on several devices (IE11, Chrome, Safari) and am prompted for the credentials to access the web site, but cannot get authenticated.

Have tried both Username/Password as well as Domainname\Username / Password, but neither work.

The credentials box is just presented three times then the Unauthorized Access page is displayed.

 

How do you correctly configure the Website service to allow access by only a select group of users from AD?

TIA

 

Rick

Mac mini (Late 2014), OS X El Capitan (10.11.3)

Posted on Mar 16, 2016 1:21 PM

Close

Q: Active Directory authentication to Server Website fails

  • All replies
  • Helpful answers

  • by AMES-Cambridge-UK,

    AMES-Cambridge-UK AMES-Cambridge-UK Aug 25, 2016 2:50 AM in response to scdladmin
    Level 1 (4 points)
    Servers Enterprise
    Aug 25, 2016 2:50 AM in response to scdladmin

    This problem exists even in the absence of AD: I have users and groups defined in the Open Directory hosted on the server that's also running the web sites and have the exact same problem. None of the users in the specified group can log on if the option to limit access to a group is invoked.

     

    This is still present in the current versions: OS 10.11.6, Server 5.1.7

     

    Can this really be as totally broken as it seems?