topic Re: Remote VPN users can not log in through LDAP AD in Firewall and Security Management

Remote VPN users can not log in through LDAP AD

Abi_Osorio — Fri, 27 Aug 2021 21:05:42 GMT

I have the next scenario:

All remote users are logged out and when they try to log in again they can see the wrong password message.

At first we checked with sk120847 and sk114798, the fingerprint is ok.
The AD server has the correct configuration.

The only solution at this time is to redo the LDAP server object in the firewall, and then the communication is restored.

This problem appeared 2 months ago and we can't find the source of the problem.

Does anyone have a similar problem?

Re: Remote VPN users can not log in through LDAP AD

PhoneBoy — Mon, 30 Aug 2021 07:51:56 GMT

I would suggest engaging the TAC on this if you haven't already.

Re: Remote VPN users can not log in through LDAP AD

Albin — Mon, 30 Aug 2021 08:03:43 GMT

Some tips to check this:

I would advise to check the log in logs on the SmartLog at the time of the issue. It can probably give some more hints.

If you used a template user, the issue could be that the user expired. (The above logs should help to show that). Sometimes the error is different for the user versus what is logged in the SmartLog. In this case, it could say "User expired" in SmartLogs.

Check audit logs for edits on the AU.