cannot login using AD

[r0mm3L_]

hi guys,

im new to SA.

i'm done creating an authentication server, i choose "Active Directory / Windows NT" and when i click the test configuration, it says "Configuration successful. No errors detected."

but i can't login to SA using accounts on AD.

what are the possible cause of this.

Thanks,

Rommel

[Kalex_]

Hi Rommel,

do you see any logins in the User Access logs? What is the variable you use:

• <USER> (exists of DOMAIN\LOGINNAME)
• <USERNAME> (exists of loginname)

UPNs won't work out of the box, please see following post for more info:

https://forums.pulsesecure.net/topic/pulse-connect-secure/33983-active-directory-upn-login-possible

Best of luck,

[r0mm3L_]

im sorry what is UPNS? i tried both (exists of DOMAIN\LOGINNAME) and (exists of loginname)

[muttbarker_]

Don't worry about UPN it refers to the format of [email protected].

What happens when you try and login? What does the user access log show? That is the first place to start. Also, what error do you get on the login screen.

You also remembered to link your auth server to the realm you are logging into?

[r0mm3L_]

thanks, i will check

[r0mm3L_]

hi,

im going to check the user access logs but, the error when logging in is "Invalid username or password. Please re-enter your user information."

[r0mm3L_]

user access logs:

ALASTRA\tiffany(Users)[] - Primary authentication failed for ALASTRA\tiffany/System Local from _

looks like my exisiting local auth server "System Local" is overiding true?

[Kalex_]

Hi Rommel,

what does your Realm look like?

First, select the following page:

Users Menu -> User Realms -> <Realm Name> (probably Users) -> General

Then check under Servers:

Authentication: <Auth Server>

Is the <auth server> the AD authentication server you created under

Authentication Menu -> Auth. Server ?

[Kalex_]

The log format is

DOMAIN \ username / RealmName (spaces inserted around \ and / for clarity)

So apparently you have a "System Local" realm. Could you check your sign-in policies?