topic Re: LDAP Authentication in General Topics

LDAP Authentication

grkchr — Mon, 18 Mar 2013 19:55:04 GMT

Hello all,

I'm running on a PA5050 and I'm wondering how I specify what groups I want to have specific access to the WebUI using LDAP authentication. Also, is there a way to setup automatic account creation for new accounts that login using LDAP or do I still need to manually add everyone?

Thanks in advance.

Re: LDAP Authentication

kfindlen — Mon, 18 Mar 2013 20:09:02 GMT

When using LDAP authentication you must specify each administrator manually and specify the authentication profile for LDAP on a per-user basis. Within the LDAP authentication profile you can specify an allow list based on group, but since you have to create each admin individually providing the group filter may be redundant.

Re: LDAP Authentication

grkchr — Mon, 18 Mar 2013 20:25:59 GMT

Thanks. This is what I was looking for.

Re: LDAP Authentication

apasupulati — Thu, 21 Mar 2013 05:48:23 GMT

Hello,

Just another side note, you can use Radius authentication with VSAs if you want to avoid creating users on the firewall. The VSAs can pull the username and the admin role automatically.

You can view this document for more details and to get help setting it up:

Thanks,

Aditi

Re: LDAP Authentication

jerick — Fri, 22 Mar 2013 06:17:35 GMT

Hello

Here is my configuration on LDAP

*Group Objects

Search Filter:

Object Class: posixGroup

Group Name: cn

Group Member: memberUid

*User Objects

Search Filter:

Object Class: person

User Name: uid

hope this help

Jerick