not able to login in firewall by authentication profile

[Jafar_Hussain]

Hello team,

I have created a local and AD authentication profile.

Then I have created an administrator and the same profile allow there. but when i try to login in Firewall getting the incorrect user name and password error.

please suggest how can i login in firewall by AD user.

[SutareMayur]

@Jafar_Hussain,

Check LDAP server profile again. As you are using Active Directory for authentication,  make sure BASE DN, BIND DN  (like CN, OU and DC) and associated password is correct for the user mentioned under BIND DN.

Hope it helps!

Mayur

[Jafar_Hussain]

@SutareMayur 

Hello Mayur,

Thanks for your reply,

I have checked all the password is correct, even i tried to login in firewall with local authentication profile but getting the same error.

[Vikashh]

@Jafar_Hussain ,

Are you able to login default admin user?

[Jafar_Hussain]

@vikas 

Yes, I can log in by admin as well as another different administrator account. Hence when i attach the authentication profile of any other admin I can't log in.

[Mick_Ball]

have you tested your authentication profile via CLI.

test authentication authentication-profile <authentication-profile-name> username <username>password

if this fails you need to check if using userPrincipalName or sAMAccountName  in your authentication profile.

[Jafar_Hussain]

@Mick_Ball 

Yes, the Authentication test is succeeded.

[Mick_Ball]

have you tried the CLI for both AD and Local Authentication profiles?

[Jafar_Hussain]

@Mick_Ball 

Yes, I have tried both and it was succeeded.

[Mick_Ball]

what is the error shown in the system logs on the firewall?

[Jafar_Hussain]

@Mick_Ball 

It is showing an incorrect user name and password.

[Mick_Ball]

Check the authentication profile.

are you using PrincipalName or sAMAccountName  in your authentication profile and do you have a user domain entry or a username modifier.

[Jafar_Hussain]

@Mick_Ball

are you using PrincipalName or sAMAccountName in your authentication profile - Yes

and do you have a user domain entry or a username modifier?  - How can we check

[Mick_Ball]

you answered yes to this question.

are you using PrincipalName or sAMAccountName in your authentication profile?

you cannot be using both so which one?

and do you have a user domain entry or a username modifier?  - How can we check

this is set in the authentication profile.

perhaps you could print screen and post this profile.