This message was deleted.
# citrix-netscalers
Slackbot
09/25/2020, 7:08 PMThis message was deleted.
n
Neal Dolson
09/25/2020, 7:08 PMJust sitting here at this screen
Neal Dolson
09/25/2020, 7:18 PMCompared the aaad.debug entries to a working Gateway in another site and they both match, the last entry is "send_accept" sending accept to kernel for [username]
Neal Dolson
09/25/2020, 7:43 PMWell....I figured if I was going to have to revert to the prior version/snapshot maybe upgrading to the latest patched 12.1 firmware would be worth trying, and it fixed it.
👍 2
d
Daniel Marsh
09/27/2020, 10:05 PMThere's an SSO change in the latest 13.0 build that exhibits the same symptoms, but I didn't think any earlier builds incorporated this (changes to NTLM auth)
"From Citrix ADC feature release 13.0 build 64.35 and above, the following SSO types are dishonored globally.
• Basic authentication
• Digest Access authentication
• NTLM without Negotiate NTLM2 Key or Negotiate Sign"
https://docs.citrix.com/en-us/citrix-adc/current-release/aaa-tm/enable-sso-for-auth-pol.html#citrix-gateway-cases
n
Neal Dolson
09/27/2020, 10:15 PMThanks for the info. Ended up having to revert the 12.1 upgrade as we were having services flapping after and I wasn’t going to wait all weekend for support to get back to me since it seems like they only take P1’s on the weekend. Typical NetScaler upgrades...