Authentication two domains

[FidlerNL]

I have a setup with a Cisco ASA 5505 which makes a VPN with AD authentication.

Just recently my company joined with another company and I need to extend the AD authentication to their domain too.

I allready created a trust between the domains but the users from the second domain could not authenticate..

It looks like the ASA is only checking the original domain.

I need some help with this.

 

[Supergrrover]

can you post a config and topology?

Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[FidlerNL]

Unfortunately I do not have access to the ASA, it is managed by another party.

They are supposed to make the change to make it possible to authenticate from two (trusted) domains but they are a bit slow.

The situation is as follows :
domain A has a sharepoint portal. This portal site can be accessed localy and remote. The local connection is managed by granting access on the Sharepoint side, to groups and individuals.
External access is managed bij the ASA, a login page is presented and user log in with their domain username and password. They do not have to specify their domain. The accounts are member of a Global Security Group wich has been granted acces at the Sharepoint portal administration site.

Recently our company has taken over another company with their own domain, Domain B. A trust between the domains has been created.
Users from Domain B have been granted access on the sharepoint portal and if the access it locally the need to login with their domain account. This works without problems. Als tested it with groups, this works also and users don't have to login anymore.
However, if the users from Domain B want to access the site externally they don't get access.
Tried logging in with and without the the full domain names but no access.

It looks like the ASA is configured to only check in Domain A. Users from Domain B don't have an account there and cannot be authenticated.

 

[unclerico]

Are you using LDAP authentication or RADIUS?? If RADIUS are you using IAS??

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)