topic Re: Global Protect + LDAP + Cert Auth = Auth Fail AND Auth Success in General Topics

Global Protect + LDAP + Cert Auth = Auth Fail AND Auth Success

jambulo — Tue, 26 Aug 2014 14:10:50 GMT

Is anyone else running this setup...

Global Protect VPN(iPads specifically) using LDAP(Active Directory) AND client certificate for authentication.

...if you are, have you noticed in the System logs, when a user authenticates to Global Protect the PA logs one or two Auth Fails followed by an Auth Success?

Our users are not noticing anything on their end, but looking at packet captures, it looks like the PA never sends the LDAP request for the first two Auth Fails, then finally sends it on the third Auth.

Currently on 5.0.11. PA Support says to upgrade to 5.0.14, although I did not read anything in the release notes about this being fixed.

Re: Global Protect + LDAP + Cert Auth = Auth Fail AND Auth Success

hshah — Tue, 26 Aug 2014 17:49:51 GMT

Hi Jambulo,

If you have seen packet capture, and verified firewall didnt send packets in first two attempts. Then its certainly a bug.

Before upgrade to 5.0.14, you should ask engineer for root cause. And also ask for bug which suggested upgrade to 5.0.14.

This will ensure, you will not have same issue after moving to 5.0.14.

Regards,

Hardik Shah

Re: Global Protect + LDAP + Cert Auth = Auth Fail AND Auth Success

pulukas — Tue, 26 Aug 2014 20:03:54 GMT

I agree with Hardik.

If there is a bug that was fixed in 5.0.14 your support engineer should be able to give you the bug number and a reference in the release notes.

Re: Global Protect + LDAP + Cert Auth = Auth Fail AND Auth Success

_slv_ — Wed, 27 Aug 2014 09:27:19 GMT

Hi Jambulo

I have another idea.

How looks Your authentication sequence?

Is ther only one profile on profile list?

I observed similar logs entries when I have two profiles in one authentication sequence, so PAN tryed to authenticate on first profile and then on next one if was unable to authenticate on the first.

Please verify that

With regards

SLawek