topic Re: Problem LDAP in General Topics https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41973#M30857 <HTML><HEAD></HEAD><BODY><P>The problem is solved. My client had blocked the account (base dn) which the PA use to connect to the AD. They unlocked the account and its working ... THANKS</P></BODY></HTML> Mon, 22 Oct 2012 22:03:56 GMT jesus_cano 2012-10-22T22:03:56Z Problem LDAP https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41969#M30853 <HTML><HEAD></HEAD><BODY><P>Hi I have a problem with my firewall palo alto. I hope you can help me</P><P></P><P>I had configured an LDAP server (Active Directory) in my Palo Alto. Also I had created two Atuhentication profile. One for VPN access and another for the administration of Palo Alto.</P><P></P><P>But from yesterday&nbsp; that I made ​​a commit to add a new user to access the VPN "Authentication Profile" we cant logging in the VPN Authentication or management palo alto.</P><P></P><P>Everything seems to be configured correctly. Any idea what could be happening?</P></BODY></HTML> Fri, 19 Oct 2012 18:15:00 GMT https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41969#M30853 jesus_cano 2012-10-19T18:15:00Z Re: Problem LDAP https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41970#M30854 <HTML><HEAD></HEAD><BODY><P>What version of PAN-OS do you have installed?</P><P></P><P>What's the message you're getting in the System logs? I would search the logs for ( eventid eq auth-fail ).</P></BODY></HTML> Fri, 19 Oct 2012 18:25:43 GMT https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41970#M30854 mharding 2012-10-19T18:25:43Z Re: Problem LDAP https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41971#M30855 <HTML><HEAD></HEAD><BODY><P>I can see this in the log system</P><P></P><P>10/22 10:10:58 general informational auth-fail&nbsp; User 'oalgt\telindus' failed authentication. Reason: Invalid username/password From: 10.1.3.236. </P><P>10/22 09:27:43 general informational auth-fail&nbsp; User 'oalgt\marcoliver' failed authentication. Reason: Invalid username/password From: 81.184.2.25. </P><P></P><P>Its like the Palo Alto cant get correctly the password from Active directory but i can open a session in W2003 with this windows account.</P><P>How can i see where the paloalto is searching the LDAP attributes???? or any troubleshooting for this???</P><P></P><P></P><P>Thanks you very much</P></BODY></HTML> Mon, 22 Oct 2012 08:20:25 GMT https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41971#M30855 jesus_cano 2012-10-22T08:20:25Z Re: Problem LDAP https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41972#M30856 <HTML><HEAD></HEAD><BODY><P>i have this version PANOS 4.0.11</P></BODY></HTML> Mon, 22 Oct 2012 08:23:34 GMT https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41972#M30856 jesus_cano 2012-10-22T08:23:34Z Re: Problem LDAP https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41973#M30857 <HTML><HEAD></HEAD><BODY><P>The problem is solved. My client had blocked the account (base dn) which the PA use to connect to the AD. They unlocked the account and its working ... THANKS</P></BODY></HTML> Mon, 22 Oct 2012 22:03:56 GMT https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41973#M30857 jesus_cano 2012-10-22T22:03:56Z Re: Problem LDAP https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41974#M30858 <HTML><HEAD></HEAD><BODY><P>Hi</P><P>I'm getting the same error messages (auth-fail) in System logs.</P><P>The error messages are for users trying Captive Portal to get out to the Internet.</P><P>I'm using Kerberos as Authentication profile for my Captive Portal settings.</P><P>I'm sure the usernames and passwords are correct.</P><P></P><P>Any idea?</P><P></P><P>Thanks</P></BODY></HTML> Wed, 20 Feb 2013 00:47:21 GMT https://live.paloaltonetworks.com/t5/general-topics/problem-ldap/m-p/41974#M30858 sthscadmin 2013-02-20T00:47:21Z