SRX firewalls are capable of retrieving user and group information from an Active Directory by implementing the Integrated User Firewall authentication. In order to achieve this, the SRX communicates with the Active Directory via LDAP using the configured username and password, which must contain only English characters.

Although the IP connectivity, port access, and permissions are properly configured on the SRX, the output below shows the status as disconnected and the reason as network issue.
 

root@SRX> show services user-identification active-directory-access domain-controller status extensive

    Domain: example.net
    Domain controller: AD1
    Address: 10.114.158.38
    Status: Disconnected
    Reason: Network issue  

• Overview of Integrated User Firewall    
• LDAP Functionality in Integrated User Firewall
• Example: Configuring Integrated User Firewall

In order for the SRX and Active Directory server to communicate properly, the Active Directory server must be configured for the English language and the password configured in the SRX must contain English characters only. As of Junos 15.1X49-D35, the SRX supports only basic ASCII with LDAP.

If the Active Directory server is already in English, ensure the password configured on the SRX contains English characters only.
 

user@host# show services user-identification active-directory-access
    domain example.net {
	user {
	      administrator;
	      password "$ABC123"; ## SECRET-DATA   <<< This password should contain English characters only.
	       }
		domain-controller AD1 {
			address 10.114.158.38;
		                   }
		user-group-mapping {
			         ldap {
				base DC=example,DC=net;
	       }
	     }
	              }

2020-02-27: minor non-technical edits.

• Example: Configuring Integrated User Firewall
• KB29659 - [SRX] Configuring User Permissions for Integrated User Firewall in Active Directory [juniper.net]
• LDAP Functionality in Integrated User Firewall
• Overview of Integrated User Firewall
• KB30778 - [SRX] What ports should be opened up on a firewall for the Integrated User Firewall (LDAP) feature to work? [juniper.net]