VPNSSL AD authentication problem

andrealemmi · June 6

Good morning,I can't add an "ext-group-users" with AD authentication, in the access user to a vpnssl, I can insert a group that contains "ext-group-users" but I am not authenticated

rv_faro · June 6

Hi @andrealemmi ,

I have exactly the same problem on a USG FLEX 700 (non "H") . This happens only with firmware version 5.40.

up to firmware version 5.39.1 this works fine.

with model USG FLEX 500 and Firmware 5.40 authentication works fine

which model / firmware you have?

andrealemmi · June 6

I have a usg-flex100h with firmware V1.32(ABXF.0)

Zyxel_Melen · June 6

Hi @andrealemmi,

Since this is USG FLEX H category, I assume your firewall is H series. I did a local lab that I can add an extent-group-user and use this user to connect SSL VPN. Do you add your user to SSL VPN > authentication > user list? You may follow this video to learn how to configure.

https://jam.dev/c/14a321b4-acc0-434e-8fe6-b71503dc943a

P.S. Currently, extent-group-user object is not selectable in the authentication user list. You need to create a group and add the user to this group.

If your issue is on other setting/page, please describe more details and share some screenshot, so we can better know your issue and help to resolve.

andrealemmi · June 6

thanks for the reply.in the images the configuration of ext-group-users, group and vpn. if I do the user test on ext-group-users it tells me that the user belongs to the domain group, if I connect with openvpn it tells me authentication failed.

VPNSSL AD authentication problem

All Replies

Categories

Security Help Center