I suspect that the Astaro doesn't "know" the users, so it cannot maintain a whitelist for them. The user object in the Astaro needs to include email address(es) associated to the user.
This problem should not exist for user objects auto-created via backend authentication, so it the users are NOT just incomplete "Local" user definitions in the Astaro, there's some other problem.
Cheers - Bob
Sophos UTM Community Moderator Sophos Certified Architect - UTM Sophos Certified Engineer - XG Gold Solution Partner since 2005
