I'm trying to use ldap as a first method of ayhentication for ssl vpn but the resut for all tests are failure so far.Please find the detail as per below:
ldap attribute-map LDAP_MAP
map-name memberOf IETF-Radius-Class
map-value memberOf CN=Users,DC=ap,DC=firstcorp,DC=net AUNZ_USERS
aaa-server LDAP-GROUP protocol ldap
max-failed-attempts 5
aaa-server LDAP-GROUP (INSIDE) host 10.10.2.100
ldap-base-dn OU=LPAU,DC=ap,DC=firstcorp,DC=net
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn CN=svcsslvpnro,OU=Service Accounts,OU=Users,OU=LPAU,DC=ap,DC=firstcorp,DC=net
server-type microsoft
ldap-attribute-map LDAP_MAP
aaa-server RADIUS-GROUP protocol radius
reactivation-mode depletion deadtime 2
aaa-server RADIUS-GROUP (INSIDE) host 10.10.2.20
key *****
Test and Debug result:
test aaa-server authentication LDAP-GROUP username ganjk password *******
Server IP Address or name: 10.10.2.100
INFO: Attempting Authentication test to IP address <10.10.2.100> (timeout: 12 seconds)
[-2147483611] Session Start
[-2147483611] New request Session, context 0x00007fd471e9d880, reqType = Authentication
[-2147483611] Fiber started
[-2147483611] Creating LDAP context with uri=ldap://10.10.2.100:389
[-2147483611] Connect to LDAP server: ldap://10.10.2.100:389, status = Successful
[-2147483611] supportedLDAPVersion: value = 3
[-2147483611] supportedLDAPVersion: value = 2
[-2147483611] Binding as svcsslvpnro
[-2147483611] Performing Simple authentication for svcsslvpnro to 10.10.2.100
[-2147483611] LDAP Search:
Base DN = [OU=LPAU,DC=ap,DC=firstcorp,DC=net]
Filter = [sAMAccountName=ganjk]
Scope = [ONE LEVEL]
[-2147483611] Search result parsing returned failure status
[-2147483611] Talking to Active Directory server 10.19.20.100
[-2147483611] Reading password policy for ganjk, dn:
[-2147483611] Binding as svcsslvpnro
[-2147483611] Performing Simple authentication for svcsslvpnro to 10.10.2.100
[-2147483611] Fiber exit Tx=603 bytes Rx=825 bytes, status=-1
[-2147483611] Session End
ERROR: Authentication Rejected: Unspecified
