Windows Authentication Client Shows Domain Mismatch
Posted by Chris Cooper, Last modified by on 14 November 2013 10:11 AM
When the Cipafilter's Windows Authentication Client shows a Domain Mismatch warning, it indicates that the Authentication Client is unable to join that machine to your domain. This will result in your users not being filtered properly according to their groups.
An error with the Cipafilter Authentication Client is easy to spot; there will be a red exclamation mark over the taskbar icon and a popup description of the problem:
More information about the Authentication Client can be gathered by right-clicking the taskbar icon and selecting "About..." The Communication Status Field will often give a detailed explanation of the problem that can be used to troubleshoot.
In order to correct a "Domain Mismatch" status issue, access your Cipafilter's web interface and follow the steps below:
1. Navigate to the Content Filtering page of Internet Filtering and click on the Advanced Configuration tab.
2. Under Proxy Authentication Settings, click the Authentication Method dropdown and make one of the following selections:
a. For Novell, select "Novell eDirectory (client)"
b. For Active Directory, select "Windows Active Directory (client)"
Now, navigate to General Settings -> IP Settings and check your "Windows Domain"* field:
1. For Novell, enter "NOVELL" in this field.
2. For Active Directory, enter the Pre-Windows 2000 domain name** (NETBIOS domain name).
*Note: The NETBIOS name is in ALL CAPS.
**The Pre-Windows 2000 domain name can be found in Active Directory Users and Computers by selecting Properties of the domain.