[IAG] Domain user authentication is online to the local: openldap domain users add @domain name authentication

Problem Description

Openldap domain user authentication, domain user authentication is online to the local, not in the domain group

Warning Information

940235c23552daafad.png (9.91 KB)

Process——

1. Check if there is no domain user with the same name locally
2. Check the login and logout logs to see if they are online in the local group
3. The re-authentication login test found that the user name was submitted directly using the domain name jazzy2.rao@
4. The user name does not have the @ domain name suffix authentication can be normally online to the domain group

solution

Do not use domain username plus @domain name suffix for openldap domain user authentication

Original Link

https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=6719&isOpen=true