AD and ACE-RSA as secondary auth domain\username prepending issue

[vanskee2_]

Hi Everyone,

Need your advise on this issue, I'm running a 6.5r5 sa2500 and we are trying to setup an auth realm with AD as primary and RSA-ACE as secondary auth option. However, our login always fails for ACE because the <user> variable specified for AD auth has the <domainname> prepend , i.e. domain\user, and RSA server is ignoring this user as it only recognize "user".

I need to know if there is a workaround on ssl or rsa device to handle such case? or any experience that you may have and willing to share... thanks to all mate!

Ivan

[zanyterp_ · Accepted solution]

Is your secondary auth server setting the username as <USER> or <USERNAME>? If the former, it is expected to include the domain name; if the latter, the expectation is that only the username will be given.

How do users provide usernames for AD: domain\username or username?

[vanskee2_]

Thanks mate! yup I was using <USER>, changed it and it look good now...

[zanyterp_]

Very cool; glad to hear it and glad to help.