topic Re: captive portal questions in General Topics

captive portal questions

gilles007 — Mon, 10 Feb 2020 00:44:19 GMT

hello,

i need to authenticate users who are using workstations which are not in my windows domain.

captive portal with local users is working.

but if i create users in my windows domain and try to authenticate them with an ldap profile, it's not working.

captive portal authenticate them (command "show user ip-user-mapping all" shows my users) but ressources access are not allowed.

i use users in my policies.

i try to make the firewall read security logs but still no success.

is this normal ?

well i think it is.

ldap authentication is working but i need to NOT put users in my policies.

Re: captive portal questions

BPry — Mon, 10 Feb 2020 03:39:20 GMT

@gilles007,

WHat issues are you having when you are attempting to configure user-id to read your DC security logs? Usually this is caused by improper security permissions being set on the server side of things, so I would start by insuring that this is 100% configured correctly.

Permission Documentation

Re: captive portal questions

gilles007 — Tue, 11 Feb 2020 15:04:04 GMT

hello,

i'm not readind security logs, i'm using an ldap profile.

group mapping is really something difficult to configure but it's working now.

is there a document to compare ldap vs kerberos vs user-id agent ?