This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN AD Auth ERROR

Hi.

I have a couple of users that use SSL VPN and do auth by Active Directory, but only 1 user alway get AUTH_FAILED even username and password is correct. This is my personal user. I can login to user portal and Admin, but alway get AUTH_FAILED.

I have tried to delete det user from Sophos XG and deleted the user certificate, and downloaded new configurations, but still get AUTH_FAILED.

I have also tried the suggestions from this article but no success. https://community.sophos.com/products/xg-firewall/f/vpn/77217/ssl-vpn-auth-failed-error

The same error occurs on both Windows computer and OpenVPN app on iOS.

Here is an screenshot of Windows VPN Client:

Screenshot of auth settings:

Here is the authentication log from the firewall:

User sindre@sindre.local failed to login to SSLVPN through Local,AD authentication mechanism because of

If anyone could please help with this very annoying problem i would be extremly happy :)

This thread was automatically locked due to age.

Parents

0 lferrara over 7 years ago

First of All,

move the AD at the top inside the authentication server list.

Also does the user have some special characters in password or sAMAccount?

https://community.sophos.com/products/xg-firewall/f/authentication/82811/special-characters-samaccountname---ad-readiness-tool

Which is the primary group of this user? Can you print the group membership tab of AD?

Thanks
Cancel
Vote Up 0 Vote Down

Cancel
0 sindrehal over 7 years ago in reply to lferrara

Ok i have moved the AD server to the top on the authentication list.

Here i will provide some screenshots, i hope this is the ones you asked.

Sophos XG User List:

AD User Account:
Cancel
Vote Up 0 Vote Down

Cancel
0 Aditya Patel over 7 years ago in reply to sindrehal

Hi sindrehal ,

Could you consider changing the user from the administrator, You cannot do directly but may need to remove the administrator from local and re-authenticate again using a local captive portal . When the user is poped up in the XG set the SSL VPN profile and re-configure the client.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Aditya Patel over 7 years ago in reply to sindrehal

Hi sindrehal ,

Could you consider changing the user from the administrator, You cannot do directly but may need to remove the administrator from local and re-authenticate again using a local captive portal . When the user is poped up in the XG set the SSL VPN profile and re-configure the client.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 sindrehal over 7 years ago in reply to Aditya Patel

Hi Aditya.

i deleted the user from XG firewall and loggin in to captive portal and downloaded and installed new SSL VPN configs and that worked, but now i cant loggin to XG admin with this user. is this correct?

Regards Sindre
Cancel
Vote Up 0 Vote Down

Cancel