I have set up VPN certificate authentication/authorization on an ASA5520. I am not having any problems with the authentication part, but, I am having an issue with authorization. Users get authorization through LDAP to our AD network, however, we have some users which get “%ASA-6-113005: AAA user authorization Rejected : reason = User was not found : server =”. This is just happening to some and not all users.
I have captured the log files and compared the username being sent via ldap is the same as what is listed for their username on the DC. The users are able to log onto the domain with no problem they are just unable to get authorization through VPN, they have dial-in permissions and what I have been able to tell the basic groups are the same. They have attempted to log on through different computer systems, it makes no difference.
What could be the problem where some are able to get authorization and others are not?