Security Analytics LDAP Authentication issue

[YossiNagar]

Hi, 

I'm facing a problem with authenticating to SA with AD accounts. 

A few weeks ago one of my colleagues was not able to login the system using he's AD account, so for temporary solution I created for him a local account. 

This morning, I was trying to login the system using my AD account, but I got the same "Bad Credentials" error message like him. 

I found a solution suggestion here but it didn't help me to solve it. 

When searching the logs under /var/lib/netwitness/uax/logs I found an error "Failed to locate directory entry for authenticated user: <USERNAME>"

I removed the AD settings from the SA and created it again, but nothing changed - I can login the system just with the local administrative account. 

We're using SA version 10.6.1.0

Anyone have maybe another idea?

Thanks. 

[someone · Accepted solution]

I had a similar problem before when IT created the user with the User Principal Name (UPN). As a workaround we had to append the domain name.

So testuser@example.com instead of testuser. You can try and see if that works and if so you can change the UPN on the account.

[YossiNagar]

Thanks Marinos, you're absolutely right! 

I checked with the IT department, they told my that recently they added now UPN in order to connect other resources in the company. 

Thanks!