Remote VPN users can not log in through LDAP AD

[Abi_Osorio]

I have the next scenario:

All remote users are logged out and when they try to log in again they can see the wrong password message.

At first we checked with sk120847 and sk114798, the fingerprint is ok.
The AD server has the correct configuration.

The only solution at this time is to redo the LDAP server object in the firewall, and then the communication is restored.

This problem appeared 2 months ago and we can't find the source of the problem.

Does anyone have a similar problem?

[PhoneBoy]

I would suggest engaging the TAC on this if you haven't already.

[Albin]

Some tips to check this:

I would advise to check the log in logs on the SmartLog at the time of the issue. It can probably give some more hints.

If you used a template user, the issue could be that the user expired. (The above logs should help to show that). Sometimes the error is different for the user versus what is logged in the SmartLog. In this case, it could say "User expired" in SmartLogs.

Check audit logs for edits on the AU.