Retour
-
Titre
Secure Token Service authentication failing because the request is coming from the wrong URL -
Description
Secure Token Service authentication failing because the request is coming from the wrong URL -
Cause
By default, Password Manager will always pass the FQDN of the Password Manager host as the source URL of the authentication request passed to the Secure Token Server.
This can be modified using a hostname resolution rule. -
Résolution
The IP range-based hostname resolution feature allows administrators to define specific IPv4 ranges using IP addresses and subnet masks, and associate hostnames with these ranges.- In the PMAdmin site, navigate to General Settings | Secure Token Server
- Under IP ranged-based rules for hostname resolution click Add
The IP ranges are the client ranges that are used to connect to Password Manager.
The URL specified is the URL that is passed to the Secure Token Service.
An IP Address of 0.0.0.0 and Subnet Mask of 0.0.0.0 will put in a rule for all clients.
An IP Address of 10.0.0.0 and Subnet Mask of 255.0.0.0 would put in a rule for all clients between 10.0.0.1 and 10.255.255.254.