[RESOLVED] Error logging into the Wapt console since the AD account was added to the "Protected Users" group

Share your tips or issues concerning the WAPT Console or WAPT Agent here
Forum Rules
Community Forum Rules
* English support on www.reddit.com/r/wapt
* French community support is available on this forum
* Please prefix the topic title with [RESOLVED] if it is resolved.
* Please do not edit a topic that is tagged [RESOLVED]. Open a new topic referencing the old one.
* Specify the installed WAPT version, full version, and build number (2.2.1.11957 / 2.2.2.12337 / etc.) as well as the Enterprise/Discovery edition.
* Versions 1.8.2 and earlier are no longer supported. The only questions accepted regarding version 1.8.2 are related to upgrading to a supported version (2.1, 2.2, etc.).
* Specify the server OS (Linux/Windows) and version (Debian Buster/Bullseye - CentOS 7 - Windows Server 2012/2016/2019).
* Specify the OS of the administration/package creation machine and the machine with the problematic agent, if applicable (Windows 7/10/11/Debian 11/etc.).
* Avoid asking multiple questions when opening a topic, otherwise it may be ignored. If there are multiple topics, open separate topics, preferably one after the other and not all at the same time (i.e., do not spam the forum).
* Include code snippets, screenshots, and other images directly in the post. Links to Pastebin, Bitly, and other third-party sites will be systematically removed.
* As with any community forum, support is provided voluntarily by members. If you require commercial support, you can contact Tranquil IT's sales department at 02.40.97.57.55
Answer
alex_30
Messages: 14
Registration: July 8, 2020 - 5:33 PM

December 21, 2023 - 4:41 PM

Good morning,

I apologize in advance if there has already been an answer on this subject, but I haven't been able to resolve the issue myself.

We have a Wapt server running version 2.4 on Windows Server 2019 Standard
The console is at version 2.40.14143.

We added our administrative accounts to the AD group "Protected Users" and since then we have been getting the following error:
wapt_login_protected_users.png
wapt_login_protected_users.png (28.22 KiB) Viewed 2365 times


If we remove this group, it works correctly.

Do you have a solution?

Thank you.
High
User avatar
sfonteneau
WAPT Expert
Messages: 2318
Registered: July 10, 2014 - 11:52 PM
Contact :
Contact Sfonteneau

December 22, 2023 - 2:55 PM

Hello Alexandre,

It's not possible to perform basic LDAP authentication with a user who is a member of the "Protected Users" group. For protected users, we suggest switching to Kerberos authentication (passwordless authentication based on tickets). However, this requires switching to a WAPT server under Linux (the spnego kerberos module for nginx is not available on Windows).

Using Kerberos has the significant advantage of not transmitting any passwords. :-)

- Simon
High
Answer

Return to "WAPT usage (Console, Agent) / WAPT usage (Console, Agent)"


  • To go further with WAPT