This article provides information on the functionality of the Retrieve Attributes link when configuring an LDAP Authentication profile on NetScaler.

An issue might arise when the Retrieve Attributes connection test responds with a successful connection but the users might not be able to log in. When configuring an LDAP profile, Retrieve Attributes is used to verify the Connection Settings as shown in the following screen shot:

This LDAP test connection does not initiate from the NetScaler, but from the workstation in which the web browser is running the NetScaler Administration GUI. When the Retrieve Attributes test is successful but users fail to log in, it is important to test the LDAP communication from the NetScaler appliance. This can be done using the aaad.debug utility.

Additional Resources

• NetScaler Administration Guide

Refer the following articles for information on using aaad.debug utility:

• CTX114999 - How to Troubleshoot Authentication with Aaad.debug

• CTX126589 - How to Troubleshoot AAA Group Access Problems in Access Gateway Enterprise Edition

• CTX135603 - Case Study - Active Directory Group Extraction Does not Work