VPN Clients Authentication with Certificate and User And Password

[Stefano_Bucci]

Hi all,

I know maybe this is something already seen in the past, but I'm not able to find any info about this.

I also checked the sk86240 but i'm running on R80.30. 

Actually I'm working in a LAB environment preparing a production set.

We have a DC and if I use as authentication method user and psw I'm able to log in.

I also used only certificate as authentication method with both external CA certificates generate by me and adding the external server CA, and also certificate generated by the internal_CA with the enrollment and everything works.

What I'd like to do is to authenticate users with a personal certificate signed by an external CA and then authenticate the user by AD user and password.

Behavior is strange, once certificate authentication passed once I have to put username and password the username field is not editable and keep the cn of the certificate issued by the internal ca. 

Do you have some advise?

Thanks

[G_W_Albrecht]

Did you read the Mobile Access Administration Guide R80.10 p.141ff ?

[Stefano_Bucci]

Hi, yes I did.

My case is different, I think

[G_W_Albrecht]

Maybe try Remote Access VPN Administration Guide R80.10 p.32 ff ?

[Stefano_Bucci]

Hi, same there. My case I think it's more complicated.

Thanks

[PhoneBoy]

Does the authentication still actually work when you combine the two or does it fail?
Might be worth getting the TAC involved here.

[Stefano_Bucci]

Hi PhoneBoy,

actually is still not working. I'll do some further test and then I'll go stight to the TAC.

Thanks, maybe I'll post the solution if it worth it.