This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL-VPN Active Directory Groups: No Worky

I have Active Directory working as a backend auth source and it works fine. Users can login to the Portal just fine.

My problem is that I've added an Active Directory group to the SSL-VPN Users & Groups list but when a test user who is a member of the AD group logs into the Portal, it displays a message that SSL-VPN has not been configured for this user.

Anyone know if this just is not a feature that works in ASL v7.010.

- Clay

This thread was automatically locked due to age.

Parents

0 ScottL over 18 years ago

Has this always not worked for you or just on 7.010?

Works fine for me on 7.009. I have not upgraded to 7.010 yet.

-Scott
Cancel
Vote Up 0 Vote Down

Cancel
0 hspcd over 18 years ago in reply to ScottL

We put the firewalls into production on 7.010 so I have not used the previous version.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 18 years ago in reply to hspcd

The usage of Groups has been troublesome (even when they are locally defined groups) in the VPN configuration. Adding users individually to the VPN config will allow things to work properly.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 drees over 18 years ago in reply to hspcd

You may want to try updating to 7.011 which fixes bug 7001 "eDirectory authentication in standard mode not working" which may or not apply to your issue?
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 18 years ago in reply to drees

eDirectory is the Novell Directory system, his is AD... I don't think the issue applies, but it's certainly worth a shot.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BrucekConvergent over 18 years ago in reply to drees

eDirectory is the Novell Directory system, his is AD... I don't think the issue applies, but it's certainly worth a shot.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data