Problem authentication with many domains
-
I’ve got 1 primary domain with 5 child domains.
In Environment tab, I configured 2 domain controllers from my primary domain.
I put the Base DN to my primary domain root.In User tab, I added all my account suffix for every domains, last one is the root domain.
Active Directory :
In every Child domain, I configured Global groups where I put all my users from each domain.
I configured Domain local groups in my primary domain where I put every global groups created before for every domains.When I test the authentication, I can only authenticate correctly with a user from my primary domain.
It does not work with any users from a child domain.Logs from a working authentication :
[DEBUG] Trying to authenticate user with username ‘xxx’ and account suffix ‘@company.com’
[DEBUG] Authentication successful for username ‘xxx’ and account suffix ‘@company.com’.
[WARN] Can not block or unblock the user because the user login is only simulated.
[WARN] Do not send a notification email and/or do not block the user because the user login is only simulated.
[DEBUG] UserInfo for user ‘xxx’: ………….. many debug Info OKLogs from a non working authentication :
[DEBUG] Trying to authenticate user with username ‘xxx’ and account suffix ‘@test.company.com’
[DEBUG] Authentication successful for username ‘xxx’ and account suffix ‘@test.company.com’.
[WARN] Can not block or unblock the user because the user login is only simulated.
[WARN] Do not send a notification email and/or do not block the user because the user login is only simulated.
[WARN] Attributes for ‘xxx’: could not be loaded. Does the sAMAccountName or userPrincipalName exist? Is the provided base DN valid?
[ERROR] User ‘xxx’ with GUID: ” is not in an authorization group.The plugin is not able to see memberships from my user in a child domain.
Someone is able to help me with this ?
- The topic ‘Problem authentication with many domains’ is closed to new replies.