I am attempting to use a Watchguard firebox 550e with Fireware XTM 11 to authenticate incoming traffic for RDP access. I have configured the firewall to use my domain controller for Active directory authentication with a Windows 2000 server farm and added a couple of user accounts to the users list in the firewall, but when I attempt to log onto the authentication page for the firewall, I get Logon failed. I know that the user names work and that the passwords are correct. I am also certain that I have told it to log on using Active Directory instead of the FireboxDB. I have tried using the username alone, the domain\username, and the email address. I believe that the Search base is correct (DC=mydomainname,DC=com), and I did not change any defaults for sAMAccountName (and I do not recall making any changes to those items when configuring the domain structure). Any assistance would be appreciated.
- Check to see if you have an LDAP authentication test feature in your Firebox firewall, or find out if there are any logs concerning LDAP authentication.
- Check to see if you have any error's related to LDAP or user acces in your Windows 2000 server security logs.
You'll need to find where this is actually error-ing out (user auth/firewall/server), if logs are not being helpful to you, perhaps tapping the connection with Wireshark in the middle might be helpful.
by the way, what do you mean by: "...and added a couple of user accounts to the users list in the firewall"
Make sure the clocks on the firewall and the AD box are set from the same source, so they are consistent - thats a common issue.