Configure authentication LDAP using sAMAccountName and userPrincipalName at the same time

[daviddeleye]

Hi,

I would like to configure authentication for our anyconnect connection using ldap to check the credentials against our AD. I can configure to use either sAMAccountName or userPrincipalName but not both at the same time.

ldap-naming-attribute sAMAccountName

ldap-naming-attribute userPrincipalName

gives following output

aa-server TEST (inside) host 1.1.1.1
 ldap-naming-attribute userPrincipalName

So in short, is it possible to check both?

[Mohammed al Baqari]

You can't specify both under single aaa-server group. But try to use
sAMAccountName and enable strip-group and strip-real option. This should
make both DNS and Group logins working.

[daviddeleye]

Hi Mohamed,

Thank you for the swift response.

It is unclear what DNS and group login are.

Could you explain what you mean by this?

Thank you in advance!