Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 447 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD SSO & Enduser Portal

LuisMompoHanden
Hi folks.

MyProblem:
When I try to connect to the enduser portal i get 

2007:11:15-14:58:46 (none) aua[3861]: id="3005" severity="warn" sys="System" sub="auth" name="Authentication failed" srcip="0.0.0.0" user="asgfan" caller="portal" reason="DENIED"

MyConfiguration:
- I'm running a ASG220 with FW 7.0.11.
- SSO AD authentification
- Users -> Groups: added group with limit to membership in AD group 
- Management -> End-User Portal: Allow any network, allow AD group 
- AD authentification for this group is succesfully tested with HTTP-proxy

In my case AD authentification is needed for almost everything on the ASG.
I hope someone has a adjuvant proposal to troubleshoot this.

regards

Luis Mompo Handen
- fluxIT-Germany -


This thread was automatically locked due to age.
Parents
  • 0
    Is your Astaro AD Bind user a domain admin?  Are you sure you got the container info correct for the AD Bind user?  These settings don't affect HTTP SSO, but would affect end-user portal, etc.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0
    Is your Astaro AD Bind user a domain admin?  Are you sure you got the container info correct for the AD Bind user?  These settings don't affect HTTP SSO, but would affect end-user portal, etc.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data
Cookie Information Banner