Expedition - LDAP connection issue

[alpatt]

Hi all,

hope someone can help.

I have a standard ldap config as I use it for other systems.

currently unencrypted via port 389.

Connection with ldap service account is successful.

Admin User is configured with authentication server.

But when I login with AD user is doesn't work. I just get the message "incorrect user or password"

I tried different variations of prefix & suffix.

php ldap module is on the latest version.

Is there any way to get more detailed information via any log files to find the issue?

What is actually used as the username samaccountname or principalname?

Thanks

[PavelK]

Hello @alpatt

thank you for post!

Please refer to this KB The login attribute is: "sAMAccountName".

To check the authentication logs, please use this from CLI: "tail follow yes mp-log authd.log". In addition to it, here is a LDAP troubleshooting KB.

Kind Regards

Pavel

[alpatt]

This issue is specific to Expedition not firewall. Thank you.

[lychiang]

How about the solution in this article:

https://live.paloaltonetworks.com/t5/expedition-discussions/ldap-over-ssl-authentication-not-working...