ldap authentication

[bmeyercan]

What attribute(s) is ldap authentication on asa5510 7.2(1) looking for?

debug shows authentication successful but test shows error:no error

[229] Performing Simple authentication for sbob to 192.168.1.77

[229] Authentication successful for sbob to 192.168.1.77

[229] Retrieving user attributes from server 192.168.1.77

9] Fiber exit Tx=169 bytes Rx=4077 bytes, status=-3

[229] Session End

INFO: Attempting Authentication test to IP address <192.168.1.77> (timeout: 12 s

econds)

ERROR: Authentication Error: No error

Authorization is successful

[ggilbert]

How are you testing this from the test box on ASDM?

Anyway, can you please run the following debug and send me the output.

deb aaa common 255

The output of the following from the ASA.

sh run aaa-server

sh run tunnel-group

or better yet, just the whole config if you dont mind.

On the AD box can you please run the following query and send the result to me. Please substitute the "admin user name" with the real user name that is tied between the ASA and the AD.

dsquery user -name *adminusername*