Applies to all Barracuda SSL VPNs, firmware version 2.0 and above.
When using an Active Directory User Database with your Barracuda SSL VPN, in order to allow Child Domains to be integrated along with the primary domain the Follow Referrals option must be enabled. This is the default behavior. This then allows the domains to check for more child domains that can be added to the AD. However if the Follow Referrals option is enabled and the child domains are not populating the database then further action can be taken.
The Global Catalog is a distributed data repository that contains a searchable, partial representation of every object in every domain in a multi-domain Active Directory forest. The Global Catalog is stored on domain controllers that have been designated as global catalog servers and is distributed through multi-master replication. To configure the Active Directory User Database to use the Global Catalog the SSL VPN needs to point to the port that is used for search requests, port 3268. This will query the entire Active Directory forest and should return all results. Due to the extra workload, it is possible that there will be some delay whenever attempting to open that User Database for editing.
Link to this page: