topic Re: authentication profile LDAP in General Topics

authentication profile LDAP

acmi — Wed, 03 Jul 2013 06:17:13 GMT

Hi,

When l go to authentication profile and select "add" under allow-list for a LDAP connection it does not list all Active Directory Groups from our Domain ?

We are currently on PANOS version : 5.0.3

I also have the User ID Agent setup on both of our Windows 2008 Domain Controllers using version number : 5.0.1-2

Re: authentication profile LDAP

Retired Member — Wed, 03 Jul 2013 06:37:45 GMT

you see all groups on group mapping tab ?

Re: authentication profile LDAP

apasupulati — Wed, 03 Jul 2013 07:48:47 GMT

Please refer to the article below to see if user groups are being retrieved on the firewall,

Thanks,

Aditi

Re: authentication profile LDAP

arvesynd — Wed, 03 Jul 2013 10:05:56 GMT

See if they are included in one of your group mapping profiles;

Device -> User Identification -> Group Mapping Settings.

Open one of the valid profiles, and see that the groups you're looking for is in the group include list.

Re: authentication profile LDAP

acmi — Thu, 04 Jul 2013 02:42:41 GMT

Thanks l have basically removed all group listings and now l can see them all.. For some reason specifying a particular OU Group that contained about 50 Groups was not showing them all. But after not specifying no groups in the included list it now shows them all..