topic Re: LDAP for User Mapping in General Topics

LDAP for User Mapping

Interface — Fri, 16 Aug 2013 06:44:04 GMT

Hi,

Can anyone explain: LDAP profile is needed just for User group mapping or in general for user mapping? Now i'm confuse.

Re: LDAP for User Mapping

VinceM — Fri, 16 Aug 2013 07:24:21 GMT

Hi,

Ldap profile is needed for group mapping (https://live.paloaltonetworks.com/docs/DOC-2910).

the answer is list of existing group and user and which user is member of which group.

User-id agent (or agentless) is needed for user mapping.

the answer is which IP is associate with which user.

Rgds

Hope help

Re: LDAP for User Mapping

harshanatarajan — Fri, 16 Aug 2013 07:29:58 GMT

Before a security policy can be written for groups of users, the relationships between the users and the groups they are members of must be established. This information is retrieved from an LDAP directory, such as Active Directory or eDirectory. Hope this helps.

Re: LDAP for User Mapping

harshanatarajan — Fri, 16 Aug 2013 07:48:49 GMT

Take a look at the below doc, this will give you a clear picture of -

Enumeration of users and their associated group membership.

Mapping of those users to their current IP addresses.

User Identification Tech Note PAN-OS 4.1

Re: LDAP for User Mapping

Interface — Fri, 16 Aug 2013 08:04:49 GMT

Thank you. It is now clear.