NTLM Authentication Failure
Restart Required
After NTLM SSO has been configured for the first time, it is necessary to restart the Архива server and close down all browser sessions. Try restarting the Архива server and your browser session.
Active Directory Authentication Error
Using Internet Explorer, try logging into Active Directory using the standard Архива login page. To do this, enter the equivalent of http://localhost:8090/signonform.do in the Internet Explorer URL prompt. Enter exactly the same credentials as the user who is currently logged into Windows. If unable to authenticate, Active Directory authentication may not be setup correctly for the user in question. In particular, there may not be a role defined in Архива for the user that is currently logged into Windows. In this case, create a role assignment in Configuration->Logins for this user.
Full Qualified Domain Name Not Specified
When performing NTLM SSO authentication, it is necessary to specify a fully qualified domain name and not localhost. For example, SSO authentication will not work when specifying "http://localhost:8090". Rather, use a fully qualified domain name such as "http://mailarchiva.company.com:8090".
FQDN Not Added to Internet Explorer Local Intranet Zone
The fully qualified domain name of the Архива server must be added to Internet Explorer's Local Intranet Zone. This action ensure that your Архива instance is a trusted site.
Locked Out
To circumvent SSO authentication, login directly using the following URL:
Alternatively edit your server.conf as follows:
authentication.ntlm.sso=no