Authentication via LDAP server not sending complete DN name

Reply
Highlighted

Authentication via LDAP server not sending complete DN name

Hi Team,

 

I have configured LDAP server profile and confirmed the condition of reading group via Group mapping it works.

 

When I try to test the LDAP username through authentication profile it succeed upto LDAP authentication but after it is sending DN name only with domain name and my user get failed to authenticate.

 

What else I need to check. 

 

 

test authentication authentication-profile LDAP user name remeskremeshk admin-remeshk@TH-FW-PA3060> test authentication authentication-profile LDAP user name remeshk password
Enter password :
[?1h=
Target vsys is not specified, user "remeshk" is assumed to be configured with a shared auth profile.

Do allow list check before sending out authentication request...
name "trojanholding.ae\remeshk" is in group "all"

Authentication to LDAP server at 10.3.4.10 for user "remeshk"
Egress: 172.25.25.4
Type of authentication: plaintext
Starting LDAP connection...
Succeeded to create a session with LDAP server
DN sent to LDAP server: DC=trojanholding,DC=ae
Authentication failed against LDAP server at 10.3.4.10:389 for user "remeshk"

Authentication to LDAP server at 10.3.4.11 for user "remeshk"
Egress: 172.25.25.4
Type of authentication: plaintext
Starting LDAP connection...
Succeeded to create a session with LDAP server
DN sent to LDAP server: DC=trojanholding,DC=ae
Authentication failed against LDAP server at 10.3.4.11:389 for user "remeshk"


Authentication failed for user "remeshk"

 

Highlighted
L7 Applicator

Re: Authentication via LDAP server not sending complete DN name

when you test LDAP via the test command it does not use all configured parts of the authentication profile. it does not use any domain modifier that you have set.

Highlighted

Re: Authentication via LDAP server not sending complete DN name

No it is not like that way, Here I found actually the username is missing the root structure of the domain in AD. 

Highlighted
L7 Applicator

Re: Authentication via LDAP server not sending complete DN name

sorry i am confused, can you show me a test that does work...

Highlighted

Re: Authentication via LDAP server not sending complete DN name

admin@PA-VM> test authentication authentication-profile Auth-GP username venkatesan password
Enter password :

Target vsys is not specified, user "venkatesan" is assumed to be configured with a shared auth profile.

Do allow list check before sending out authentication request...
name "venkatesan" is in group "all"

Authentication to LDAP server at 172.16.3.142 for user "venkatesan"
Egress: 192.168.30.1
Type of authentication: plaintext
Starting LDAP connection...
Succeeded to create a session with LDAP server
DN sent to LDAP server: CN=venkatesan r.,CN=Users,DC=abdalla,DC=local
User expires in days: never

Authentication succeeded for user "venkatesan"

Highlighted
L7 Applicator

Re: Authentication via LDAP server not sending complete DN name

ok so now show test that doesn't work.

Highlighted

Re: Authentication via LDAP server not sending complete DN name

it works 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!