T20:07:23.944752Z|e|1616|2400|LdapClientConnection|Failed to write to client 172.20.30.12:37435: The I/O operation has been aborted because of either a thread exit or an application request (0x03E3 = 995) T20:07:23.944752Z|e|1616|2436|LdapSslConnection|Failed to decrypt message: 0x80090302 SEC_E_UNSUPPORTED_FUNCTION - The function requested is not supported T20:07:23.866626Z|i|1616|2396|LdapProx圜ontext|PhoneFactor authentication succeeded for: 'CN=TB SA MFA Crawl Service Account,OU=Service Accounts,DC=tory,DC=local'. T20:07:23.851003Z|i|1616|2396|LdapProx圜ontext|Doing PhoneFactor authentication for user: 'CN=TB SA MFA Crawl Service Account,OU=Service Accounts,DC=tory,DC=local'.

T20:07:23.851003Z|i|1616|2432|BindRequestMessage|User name for Simple authentication is: 'CN=TB SA MFA Crawl Service Account,OU=Service Accounts,DC=tory,DC=local' Below is what I see in the logs on the MFA Server. I can use other LDAP clients to Bind to the MFA server over LDAPS successfully. It is not installed on a domain controller. It also works if we do the LDAPS directly to the domain controller. If we check that box with the all else being the same, it fails. If the SSL box on the juniper set is not checked, authentication works. We get a error when we try to authenticate with the MFA server. We don't get an error message when we click the check box.

Juniper mag4610