Issue with authenticatin SSO tansparent mode with AD dont Authenticacion withe Sophos 9.409

Hey. are you sure your binddn is correct?

CN=Administrador,CN=Users,DC=xx,DC=xx,DC=sv

Is your Administratore Name correct? Default its "Administrator" and not "Administrador"

In the logfiles it looks good. Your AD Bind works, but your authentication test failed, because there is no group for this user found.

Please check under "Definitions and Users" on your utm, if there is a group called "Active Directory users". If not, create a new one with type Backend Membership pointing to your AD Server/s and repeat your test again.

greetings

Configuring HTTP/S proxy access with AD SSO is written for Standard mode, but most of it also works with Transparent AD-SSO.  Also, have you consulted Sophos Knowledgebase Article 120791?  Have you installed STAS on your DC(s)?

Cheers - Bob

i have the same issue on 3 different enviroments with Software Version of 9.409. On one Installation i have activate STAS, but on the other 2 not.

i changed same weeks ago a hardware cluster(a 4th enviroment) with a software version of 9.408 and i am not sure but i guess that there i doesnt get this failure.

Base DN is correct. The Bind DN Test works fine. The Problem is for both Active Directory Servers

And under Definitions&Users a group exists called "AD-users" with Backend Membership.

i found same interesting Points:

i starting sniffering and found that the password is invalid because the sophos dont send a password:

if i try to proof the serversettings the password is sending and the ldap request is sucessful. i open a case so lets wait.

Michael, is your Backend Group based on a manually-created Security Group containing only user accounts in Active Directory?

Cheers - Bob

hi Bob,

yes, thats right.

michael

it is a bug. update to version 9.411 and the problem was fixed