GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » Kerio Control VPN Server (Kerio Control VPN Server for vpn clients)
Kerio Control VPN Server [message #126389] Sun, 13 December 2015 19:16 Go to next message
shoto is currently offline  shoto
Messages: 10
Registered: January 2015
Location: tbilisi, georgia
Hello
I have configured vpn server for vpn clients, It works only for internal user, not for domain users mapped from my domain controller, I tried several ways but no changes, please give me advisses
Re: Kerio Control VPN Server [message #126391 is a reply to message #126389] Mon, 14 December 2015 10:31 Go to previous messageGo to next message
Petr Dobry (Kerio) is currently offline  Petr Dobry (Kerio)
Messages: 405
Registered: November 2003

Kerio Technologies
Make sure you have enabled VPN access for the users.

./fa/4137/0/


Petr Dobry
Product Development Manager | Kerio
Re: Kerio Control VPN Server [message #126399 is a reply to message #126391] Mon, 14 December 2015 16:23 Go to previous messageGo to next message
shoto is currently offline  shoto
Messages: 10
Registered: January 2015
Location: tbilisi, georgia
VPN access is enabled, other solutions? what about certificate? must I get certificate from domain controller?
Re: Kerio Control VPN Server [message #126400 is a reply to message #126399] Mon, 14 December 2015 16:54 Go to previous messageGo to next message
Petr Dobry (Kerio) is currently offline  Petr Dobry (Kerio)
Messages: 405
Registered: November 2003

Kerio Technologies
Are there any errors in error or warning log regarding those users and VPN ?

Petr Dobry
Product Development Manager | Kerio
Re: Kerio Control VPN Server [message #126458 is a reply to message #126400] Wed, 16 December 2015 14:59 Go to previous messageGo to next message
shoto is currently offline  shoto
Messages: 10
Registered: January 2015
Location: tbilisi, georgia
authentication failed, is the error
Re: Kerio Control VPN Server [message #126459 is a reply to message #126458] Wed, 16 December 2015 15:34 Go to previous messageGo to next message
Petr Dobry (Kerio) is currently offline  Petr Dobry (Kerio)
Messages: 405
Registered: November 2003

Kerio Technologies
You may need to enable User authentication in debug log to see what's going on.

./fa/4148/0/


Petr Dobry
Product Development Manager | Kerio

[Updated on: Wed, 16 December 2015 15:34]

Report message to a moderator

Re: Kerio Control VPN Server [message #126576 is a reply to message #126459] Sat, 19 December 2015 19:55 Go to previous messageGo to next message
shoto is currently offline  shoto
Messages: 10
Registered: January 2015
Location: tbilisi, georgia
Can you tell me how to do that? I can't find that. thanks in advance
Re: Kerio Control VPN Server [message #126577 is a reply to message #126576] Sat, 19 December 2015 20:28 Go to previous messageGo to next message
Petr Dobry (Kerio) is currently offline  Petr Dobry (Kerio)
Messages: 405
Registered: November 2003

Kerio Technologies
Right click in debug log.

Petr Dobry
Product Development Manager | Kerio
Re: Kerio Control VPN Server [message #126692 is a reply to message #126577] Thu, 24 December 2015 17:41 Go to previous messageGo to next message
shoto is currently offline  shoto
Messages: 10
Registered: January 2015
Location: tbilisi, georgia
{auth} Krb5: get_init_creds_password(krbtgt/TEST-NETWORKING.COM@TEST-NETWORKING.COM, ljames<_at_>TEST-NETWORKING.COM): Clock skew too great, error code 0x96c73a25 (-1765328347)

this is the error
Re: Kerio Control VPN Server [message #126694 is a reply to message #126692] Thu, 24 December 2015 19:24 Go to previous message
Petr Dobry (Kerio) is currently offline  Petr Dobry (Kerio)
Messages: 405
Registered: November 2003

Kerio Technologies
That error means that the clock on Kerio Control and your AD server differs more than 5 minutes. You must have the same time on AD and in Kerio Control.
Use NTP to sync time.


Petr Dobry
Product Development Manager | Kerio
Previous Topic: Automatic Login for accounts in Active Directory
Next Topic: Mobile Phone connect problem!
Goto Forum:
  


Current Time: Sun Jun 04 01:37:21 CEST 2023

Total time taken to generate the page: 0.03740 seconds