topic Re: ldap groups not working in General Topics

ldap groups not working

OCDBE — Fri, 04 Feb 2011 09:29:08 GMT

Hello,

for some reason we ( and many other customers ) are still experiencing issues regarding the use of ldap groups in an authenticatin profile for example SSL VPN.

We have microsoft AD as LDAP server and we went through every step in the well known following document ( eDirectory and LDAP authentication in PANOS 3 1 3.pdf)

When we specify a single LDAP user in our authentication profile , we are able to authenticate with that user , but members of LDAP groups are not working as it should be.

I made a pdf document with printscreens of our configuration ( pdf document attached ). As you can see in the document , the PA is able to read the members of the group.

Please anyone who has good advice for us ( and many other customers ) to make this work ?

thanks alot !

Securelink support !

Re: ldap groups not working

bpappas — Mon, 07 Feb 2011 23:17:29 GMT

It looks like you are using the 4.0 BETA software. Is this correct?

Are you utilizing the SSL VPN client or the Global Protect client?

-Benjamin

Re: ldap groups not working

migration — Wed, 02 Mar 2011 08:55:07 GMT

From what I understand you need to make sure that you LDAP attibutes are in the correct case (I could be wrong)

In your "ldap_test_profile" the login attribute i think should be "sAMAccountName" and not "samaccountname" as displayed.

Hope this helps

Re: ldap groups not working

reaper — Wed, 02 Mar 2011 13:22:21 GMT

in this case the domain needed to be removed from the ldap config since the domain only needs to be filled in when a panagent is also present