Unable to change the password for ssl vpn users.

3 replies
6549 views

hi, I have configured LDAP ssl and imorted the CA certificate. users are able to authenticate using the LDAP ssl but when their password expires they get Error: Permission denied. Any ideas how to solve the issue? below is the configuration that i have set in FG-310B edit " NETWORK-SUPPORT_msft.ing" set server " 172.16.0.1" set cnid " sAMAccountName" set dn " OU=Technology,OU=Test ,DC=msft,DC=ing" set port 636 set type regular set username " CN=Bind User,OU=Automation,DC=msft,DC=ing" set password **** set secure ldaps set ca-cert " CA_Cert_1" set password-expiry-warning enable set password-renewal enable next

Anand_NarayanaAuthor

Explorer

I could able to resolve this issue myself.

dconsentini

New Member

Hi Anand,

I have the same problem with SSL VPN and domain users. Could you tell me the solution to your case?

Thanks!

Anand_NarayanaAuthor

Explorer

The "Bind User" should have write permission to change the password, during the initial test the user had just ready permission so it was able to list the user data based but changing the password for the user in AD requires write permission as well.

set username " CN=Bind User,OU=Automation,DC=msft,DC=ing"

Sign up

Login with SSO

Login to the community

Login with SSO