GUI Authentication via LDAP

[myrdin]

Hi,

i have followed the procedure to configure and it works as long as in the authentication profile the allow list is set to "all".  The user is present in the administrators list, and i can login using my domain user password.

Problem is, i want that to work against an AD group not "all". If i set a group mapping pointing to a specific AD group where the same user is, i can't login anymore. 

I am also using a group mapping for GlobalProtect, which perfeclty works.

Ideas?

thanks

[reaper]

is the group your admins are in also used in the group mapping profile? (if not you may want to add it or create a new one specifically for that group of admins)

[myrdin]

thanks reaper, that is correct, the group mapping is specifically created to map that AD group