Lab 17.3 VPN client to site ASA 8.2 authen with Active Directory Windows 2K8R2

ciscoasa#[COLOR=#ff0000] test aaa-server authentication LDAP host 192.168.10.10[/COLOR]
Username: Administrator
Password: ***********
INFO: Attempting Authentication test to IP address <192.168.10.10> (timeout: 12 seconds)
INFO: [I][COLOR=#00ff00]Authentication Successful[/COLOR][/I]

ciscoasa# [COLOR=#ff0000]debug ldap 255

[/COLOR]
debug ldap  enabled at level 255
ciscoasa#
[13] Session Start
[13] New request Session, context 0xd4e3dd68, reqType = 1
[13] Fiber started
[13] Creating LDAP context with [COLOR=#00ff00]uri=ldap://192.168.10.10:389[/COLOR]
[13] Connect to LDAP server: [COLOR=#00ff00]ldap://192.168.10.10:389, status = Successful[/COLOR]
[13] defaultNamingContext: [COLOR=#00ff00]value = DC=svuit,DC=org[/COLOR]
[13] supportedLDAPVersion: value = 3
[13] supportedLDAPVersion: value = 2
[13] supportedSASLMechanisms: value = GSSAPI
[13] supportedSASLMechanisms: value = GSS-SPNEGO
[13] supportedSASLMechanisms: value = EXTERNAL
[13] supportedSASLMechanisms: value = DIGEST-MD5
[13] Binding as administrator
[13] Performing Simple authentication for Administrator to 192.168.10.10
[13] LDAP Search:
        [COLOR=#00ff00]Base DN = [dc=svuit, dc=org]
        Filter  = [sAMAccountName=svuit]
        Scope   = [SUBTREE][/COLOR]
[13] User DN = [CN=svuit,CN=Users,DC=svuit,DC=org]
[13] [COLOR=#00ff00]Talking to Active Directory server 192.168.10.10[/COLOR]
[13] Reading password policy for svuit, dn:[COLOR=#00ff00]CN=svuit,CN=Users,DC=svuit,DC=org[/COLOR]
[13] Read bad password count 0
[13] Binding as user
[13] Performing Simple authentication for svuit to 192.168.10.10
[13] Checking password policy for user svuit
[13] Binding as administrator
[13] Performing Simple authentication for Administrator to 192.168.10.10
[13] Authentication successful for svuit to 192.168.10.10
[13] Retrieving user attributes from server 192.168.10.10
[13] now: Sun, 07 Dec 2014 11:50:52 GMT, lastset: Sun, 07 Dec 2014 10:37:19 GMT, delta=4413, maxage=1244057088 secs
[13] expire in: 3624387 secs, 42 days
[13] Retrieved Attributes:
[13]    objectClass: value = top
[13]    objectClass: value = person
[13]    objectClass: value = organizationalPerson
[13]    objectClass: value = user
[13]    cn: value = svuit
[13]    givenName: value = svuit
[13]    distinguishedName: value = CN=svuit,CN=Users,DC=svuit,DC=org
[13]    instanceType: value = 4
[13]    whenCreated: value = 20141207103719.0Z
[13]    whenChanged: value = 20141207103745.0Z
[13]    displayName: value = svuit
[13]    uSNCreated: value = 81970
[13]    uSNChanged: value = 81976
[13]    name: value = svuit
[13]    objectGUID: value = 4.{.../A.]YEr...
[13]    userAccountControl: value = 66048
[13]    badPwdCount: value = 0
[13]    codePage: value = 0
[13]    countryCode: value = 0
[13]    badPasswordTime: value = 0
[13]    lastLogoff: value = 0
[13]    lastLogon: value = 0
[13]    pwdLastSet: value = 130624222399765403
[13]    primaryGroupID: value = 513
[13]    objectSid: value = .....................=%.^...
[13]    accountExpires: value = 9223372036854775807
[13]    logonCount: value = 0
[13]    sAMAccountName: value = svuit
[13]    sAMAccountType: value = 805306368
[13]    userPrincipalName: value = svuit@svuit.org
[13]    objectCategory: value = CN=Person,CN=Schema,CN=Configuration,DC=svuit,DC=org
[13]    dSCorePropagationData: value = 16010101000000.0Z
[13]    lastLogonTimestamp: value = 130624222656385854
[13] Fiber exit Tx=695 bytes Rx=2536 bytes, status=1
[13] Session End

ciscoasa# [COLOR=#ff0000]debug ldap 255[/COLOR]

[15] Session Start
[15] New request Session, context 0xd4e3dd68, reqType = 1
[15] Fiber started
[15] Creating LDAP context with uri=ldap://192.168.10.10:389
[15] Connect to LDAP server: ldap://192.168.10.10:389, status = Successful
[15] defaultNamingContext: value = DC=svuit,DC=org
[15] supportedLDAPVersion: value = 3
[15] supportedLDAPVersion: value = 2
[15] supportedSASLMechanisms: value = GSSAPI
[15] supportedSASLMechanisms: value = GSS-SPNEGO
[15] supportedSASLMechanisms: value = EXTERNAL
[15] supportedSASLMechanisms: value = DIGEST-MD5
[15] Binding as administrator
[15] Performing Simple authentication for Administrator to 192.168.10.10
[15] LDAP Search:
        Base DN = [dc=svuit, dc=org]
        Filter  = [sAMAccountName=svuit]
        Scope   = [SUBTREE]
[15] User DN = [CN=svuit,CN=Users,DC=svuit,DC=org]
[15] Talking to Active Directory server 192.168.10.10
[15] Reading password policy for svuit, dn:CN=svuit,CN=Users,DC=svuit,DC=org
[15] Read bad password count 0


[15] Binding as user
[15] Performing Simple authentication for svuit to 192.168.10.10
[15] [COLOR=#00ff00]Simple authentication for svuit returned code (49) Invalid credentials[/COLOR]
[15] Binding as administrator
[15] Performing Simple authentication for Administrator to 192.168.10.10
[15] Reading bad password count for svuit, dn: CN=svuit,CN=Users,DC=svuit,DC=org
[15] Received badPwdCount=1 for user svuit
[15] badPwdCount=0 before, badPwdCount=1 after for svuit
[15] Invalid password for svuit
[15] Fiber exit Tx=772 bytes Rx=2730 bytes, status=-1
[15] Session End

ciscoasa# [COLOR=#ff0000]debug ldap 255

[/COLOR]
[16] Session Start
[16] New request Session, context 0xd4e3dd68, reqType = 1
[16] Fiber started
[16] Creating LDAP context with uri=ldap://192.168.10.10:389
[16] Connect to LDAP server: ldap://192.168.10.10:389, status = Successful
[16] defaultNamingContext: value = DC=svuit,DC=org
[16] supportedLDAPVersion: value = 3
[16] supportedLDAPVersion: value = 2
[16] supportedSASLMechanisms: value = GSSAPI
[16] supportedSASLMechanisms: value = GSS-SPNEGO
[16] supportedSASLMechanisms: value = EXTERNAL
[16] supportedSASLMechanisms: value = DIGEST-MD5
[16] Binding as administrator
[16] Performing Simple authentication for Administrator to 192.168.10.10
[16] LDAP Search:
        Base DN = [dc=svuit, dc=org]
        Filter  = [sAMAccountName=svuit12313]
        Scope   = [SUBTREE]
[COLOR=#00ff00][16] Requested attributes not found[/COLOR]
[16] Fiber exit Tx=283 bytes Rx=766 bytes, status=-1
[16] Session End