This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Trouble binding to Active Directory

Hi,

I am trying to connect a ASG 8.0 to our Active Directory. I am pretty sure I got the Bind DN right and the user has the proper right (Domain Admin). However, each time I hit the test button I get:

Error: Server exists and accepts connections, but bind to ldap://172.16.111.210:389 failed with this Bind DN and Password

In the log I see this:

name="Bind test failed. Method: adirectory, error: DENIED

Is there anything on the AD I have to set up in order for the ASG to be able to authenticate?

Thanks
Sascha

This thread was automatically locked due to age.

0 Peter D over 13 years ago

Hi Sascha,

no, there is nothing to do in the AD.

On the Tab Servers the following settings should work:

Server: of course your AD Server.
Port: usually 389

Bind DN: CN=administrator,CN=Users,DC=domain,DC=local
(You have to verify, if your account administrator really is in the OU "Users")
(DC=local can also be something else.. it's your domain suffix)

Password: ok... you should know [:D]

Usually it's a problem with the OU of the administrator account, as i said before.

I hope, i could help you..

Peter
Cancel
Vote Up 0 Vote Down

Cancel
0 cryptochrome over 13 years ago

Hi Peter,

we are not using the administrator account for this, we created a new admin account called "firewall". That account has admin and domain admin rights.

The OU users is correct.
Cancel
Vote Up 0 Vote Down

Cancel
0 techuser over 13 years ago in reply to cryptochrome

Can you post a picture of your configuration?
Cancel
Vote Up 0 Vote Down

Cancel
0 cryptochrome over 13 years ago in reply to techuser

Can you post a picture of your configuration?

Sure thing. See attachments.

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 Peter D over 13 years ago in reply to cryptochrome

Hi,

maybe you could try with the administrator account. So you can see if you have a trouble with your firewall account.

Sorry, but I don't have another idea at the moment....

Peter
Cancel
Vote Up 0 Vote Down

Cancel
0 techuser over 13 years ago

There is an error in your Bind DN it should be CN=firewall,CN=Users not DC=Users or to be more sure go to your active directory and execute this command
dsquery user -name firewall
copy the result (without the quotation mark) and past it in the Bind DN and of course make sure that your password is correct

HTH
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 13 years ago

This question and others are covered by: Configure HTTP-S Proxy with AD-SSO.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel