Clarification Authentication for Remote Access VPN

[RemoteUser]

Hi mates,

Hope you’re all doing well!

I have a doubt that came up while testing a task requested by the customer: making the gateway perform authentication lookup based on UPN instead of DN.

I ran some tests by creating a user with a CAPI certificate and then moving the user between different OUs. The authentication still works correctly, which is exactly the behavior I was aiming for.

This was configured on the VPN Client Authentication side, specifically:

• VPN Clients > Personal Certificate (Edit) > Fetch username from: UPN
• User Directories > LDAP Lookup Type: UPN

I’ve also attached some screenshots for reference.

My question is: since users connect via Remote Access Client, do I also need to configure the authentication method under Mobile Access, or is it not relevant in this scenario?

If anyone could clarify the differences between these two authentication methods, it would be greatly appreciated.

[PhoneBoy]

The settings in question are only relevant to how the gateway looks up the user information sent by the client. 

DN refers to a precise object in the LDAP directory.
UPN is the login name of the user.

Unless you use the Mobile Access portal, you shouldn't need to configure anything there.

[RemoteUser]

Hi @PhoneBoy thank you, can i ask What is the difference between? If I change from DN to UPN, for example, do both need to be set to UPN?

• VPN Clients > Personal Certificate (Edit) > Fetch username from: x
• User Directories > LDAP Lookup Type: x
  

Thanks

[PhoneBoy]

I would set them both to use this value, yes.
Not exactly sure where "User Directory" is still used (it's a legacy feature).