防火墙 sslvpn结合ldap

拨ssl结合ldap的时候拨不上 出现debug信息

This command is CPU intensive and might affect ongoing services.

 Are you sure you want to continue? [Y/N]:y 

<HUC-FW>*Mar 1 13:49:28:193 2022 HUC-FW SSLVPNK/7/SSLVPN_AAA: Online check: No session ID. 

*Mar 1 13:49:28:221 2022 HUC-FW SSLVPNK/7/SSLVPN_AAA: Online check: No session ID.

 *Mar 1 13:49:29:415 2022 HUC-FW SSLVPNK/7/SSLVPN_AAA: Online check: No session ID. 

*Mar 1 13:49:29:415 2022 HUC-FW SSLVPNK/7/SSLVPN_AAA: Received a client login request.

 *Mar 1 13:49:29:415 2022 HUC-FW SSLVPNK/7/SSLVPN_AAA: Authentication request: result=0x0, client MAC=60f6-77c6-dc57, private info length=32. 

*Mar 1 13:49:29:415 2022 HUC-FW SSLVPNK/7/SSLVPN_AAA: Received an authentication request from user 123456. 

*Mar 1 13:49:29:416 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Parsed private information in the authentication request: original length=32, decode length=22. 

*Mar 1 13:49:29:416 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Began to process online request: cOntextID=0x1, requestID=0xe000001. 

*Mar 1 13:49:29:416 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Processed online request successfully: cOntextID=0x1, requestID=0xe000001, username=123456. 

*Mar 1 13:49:29:416 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Set user IPv4 121.239.39.145 in PAM. Result: 0. 

*Mar 1 13:49:29:416 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Set user MAC address 60-f6-77-c6-dc-57 in PAM. Result: 0. 

*Mar 1 13:49:29:416 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Set private information in PAM. Length=23, result=0. 

*Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Processing LDAP authentication. 

*Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Data of authentication request successfully sent. 

*Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Processing AAA request data. 

*Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:LDAP server is: 10.100.120.1. 

*Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Current bind state is 4. 

*Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Search user when authentication. 

*Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Username is 123456. *

Mar 1 13:49:29:416 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP[Authen]:Search filter is (&(objectClass=person)(samaccountname=123456)). *Mar 1 13:49:29:417 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP[Authen]:Search base DN is cn=123,dc=herrmannultrasonic,dc=cn.

 *Mar 1 13:49:29:417 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Response timeout timer successfully created.

 *Mar 1 13:49:29:417 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Get result message errno = 32 

*Mar 1 13:49:29:418 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:User 123456 search done. *

Mar 1 13:49:29:418 2022 HUC-FW LDAP/7/ERROR: PAM_LDAP:Failed to search users. 

*Mar 1 13:49:29:418 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Processing LDAP authentication. 

*Mar 1 13:49:29:418 2022 HUC-FW SSLVPNK/7/SSLVPN_AAA: Authentication failed: cOntextID=0x1, requestID=0xe000001. 

*Mar 1 13:49:29:418 2022 HUC-FW LDAP/7/EVENT: PAM_LDAP:Data of authentication reply successfully obtained, resultCode: 1. 

*Mar 1 13:49:29:418 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Processed asynchronous authentication response: cOntextID=0x1, requestID=0, result=26. 

*Mar 1 13:49:29:418 2022 HUC-FW SSLVPN/7/SSLVPN_AAA: Deleted request online node: cOntextID=0x1, OnlineID=0. 

sslvpn gateway SSLVPNGW

ip address 58.210.91.206 port 8846

service enable

quit

interface SSLVPN-AC 1

ip address 10.10.10.1 255.255.255.0

quit

sslvpn ip address-pool SSLPOOL 10.10.10.2 10.10.10.40

acl advanced 3999

rule permit ip destination 10.100.120.0 0.0.0.255

quit

sslvpn context SSLVPN

gateway SSLVPNGW

ip-tunnel address-pool SSLPOOL mask 255.255.255.0

ip-tunnel dns-server primary 114.114.114.114

ip-route-list NEIWANG

include 10.100.120.0 255.255.255.0

policy-group SSLVPNZIYUAN

filter ip-tunnel acl 3999

ip-tunnel access-route ip-route-list NEIWANG

quit

aaa domain svpn

service enable

quit

user-group svpn

authorization-attribute sslvpn-policy-group SSLVPNZIYUAN

quit

ldap server svpn

login-dn CN=administrator,CN=Users,DC=herrmannultrasonic,DC=cn

search-base-dn ou=123,dc=herrmannultrasonic,dc=cn

ip 10.100.120.1

login-password simple adminhucP@

user-parameters user-name-attribute samaccountname

quit

ldap scheme svpn

authentication-server svpn

authorization-server svpn

quit

domain svpn

authorization-attribute user-group svpn

authentication sslvpn ldap-scheme svpn

authorization sslvpn ldap-scheme svpn

accounting sslvpn none

qu