topic Re: Is there a way to eliminate the need for SSL-VPN users authenticating via AD to enter the Domain field before the username ? in General Topics https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29331#M21426 <HTML><HEAD></HEAD><BODY><P>in the ldap server profile under device --&gt; server profiles --&gt; ldap did you enter in the domain in the domain field? </P><P></P><P>example if your domain is abc.com. users are currently logging in via abc\user. you will need to enter abc in the domain field. </P></BODY></HTML> Wed, 22 Feb 2012 01:46:56 GMT jnguyen 2012-02-22T01:46:56Z Is there a way to eliminate the need for SSL-VPN users authenticating via AD to enter the Domain field before the username ? https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29328#M21423 <HTML><HEAD></HEAD><BODY><P>I am using a PA-2050 and OS 4.0.5 (plans to upgrade shortly to 4.0.8)&nbsp; with NetConnect.&nbsp; We recently started using AD for authentication and it's working very well with one exception:&nbsp; the users must enter the AD domain name in with their username.&nbsp; Ex:&nbsp;&nbsp; domain\username</P><P></P><P>Is there a way to remove the need to enter the domain name if you are only using one flat AD domain?</P></BODY></HTML> Thu, 26 Jan 2012 18:02:28 GMT https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29328#M21423 dcowan 2012-01-26T18:02:28Z Re: Is there a way to eliminate the need for SSL-VPN users authenticating via AD to enter the Domain field before the username ? https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29329#M21424 <HTML><HEAD></HEAD><BODY><P>Are you using Kerberos or LDAP Authentication?</P><P></P><P>For VPN Authentication, I typically use Kerberos where you can configure the Realm and Domain, enabling the user to only need to input their username.</P></BODY></HTML> Thu, 26 Jan 2012 21:15:50 GMT https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29329#M21424 bmorrison 2012-01-26T21:15:50Z Re: Is there a way to eliminate the need for SSL-VPN users authenticating via AD to enter the Domain field before the username ? https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29330#M21425 <HTML><HEAD></HEAD><BODY><P>We are using LDAP with an authenication profile.&nbsp;&nbsp; And in addition will be adding another domain to the network soon, thus complicating the situation. </P></BODY></HTML> Fri, 27 Jan 2012 17:12:06 GMT https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29330#M21425 dcowan 2012-01-27T17:12:06Z Re: Is there a way to eliminate the need for SSL-VPN users authenticating via AD to enter the Domain field before the username ? https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29331#M21426 <HTML><HEAD></HEAD><BODY><P>in the ldap server profile under device --&gt; server profiles --&gt; ldap did you enter in the domain in the domain field? </P><P></P><P>example if your domain is abc.com. users are currently logging in via abc\user. you will need to enter abc in the domain field. </P></BODY></HTML> Wed, 22 Feb 2012 01:46:56 GMT https://live.paloaltonetworks.com/t5/general-topics/is-there-a-way-to-eliminate-the-need-for-ssl-vpn-users/m-p/29331#M21426 jnguyen 2012-02-22T01:46:56Z