SSL-VPN with Ldap

[helder_teixeira]

I´m trying to configure ssl-vpn to authenticate users in ldap server or locally with imported users from Ldap via PAN. The only way that I’ve successful login´s is when I create a local user in Palo Alto firewall. I´ve got connection to Ldap servers, and in system log it appears

User 'xpto\administrator' failed authentication. Reason: User is not in allowlist 

And the user is in the allow list.

Any Help?

[helder_teixeira]

I´ve switch the authentication profile (that was LDAP) and switch to authentication none. I add to include the group where the users belongs to.

It works now.

[athenixcorp_com]

Is your LDAP server a Windows AD server?  If so you need to use IAS not LDAP from my understanding.

[actibit]

Hi,

Thanks, I had the same issue...got working up on doing as you did...!!

[johnnywong]

Hi,

I am also work right now. However, it seems authenticate by UIA but not LDAP in server profiles. Anyone can advise it is a normal procedure or not? Thanks!

Regards,

Johnny