Tranquil IT Forum

Published: **Dec 21, 2023 - 4:41 PM**

Good morning,

I apologize in advance if there has already been an answer on this subject, but I haven't been able to resolve the issue myself.

We have a Wapt server running version 2.4 on Windows Server 2019 Standard
The console is at version 2.40.14143.

We added our administrative accounts to the AD group "Protected Users" and since then we have been getting the following error:

: wapt_login_protected_users.png (28.22 KiB) Viewed 2367 times

If we remove this group, it works correctly.

Do you have a solution?

Thank you.

Published: **Dec 22, 2023 - 2:55 PM**

Hello Alexandre,

It's not possible to perform basic LDAP authentication with a user who is a member of the "Protected Users" group. For protected users, we suggest switching to Kerberos authentication (passwordless authentication based on tickets). However, this requires switching to a WAPT server under Linux (the spnego kerberos module for nginx is not available on Windows).

Using Kerberos has the significant advantage of not transmitting any passwords.

- Simon

Tranquil IT Forum

[RESOLVED] Error logging into the Wapt console since the AD account was added to the "Protected Users" group

[RESOLVED] Error logging into the Wapt console since the AD account was added to the "Protected Users" group

Re: Error logging into the Wapt console since the AD account was added to the "Protected Users" group