topic User-ID - Lotus Domino v6.5.2 in General Topics

User-ID - Lotus Domino v6.5.2

migration — Wed, 02 Mar 2011 10:23:27 GMT

Hi All,

Hoping you can help, is it possible for the User-ID_LDAP Agent to communicate and get IP Mapping from a Lotus Domino directory server ?

Cheers

Marc

Re: User-ID - Lotus Domino v6.5.2

skrall — Wed, 02 Mar 2011 19:44:21 GMT

I believe the answer is no based on this info found ina KPoint posting.

PANOS 3.1 and above.

While you can use any LDAP server for SSL VPN, Captive Portal or Admin access, the User-ID agent is supported by eDirectory. eDirectory modifies an attribute that most LDAP schemas do not contain; networkAddress. The PAN decrypts this field which is stored as a combination of IP address and a 1,3, or 9 to indicate whether the connection is TCP, UDP or whether a TCP port is included. The User-ID agent converts this to an IP address. Additionally, the Timestamp attribute is modified to query only changed entries. Only eDirectory 8.8 is supported because the LDAP Page Control specs are utilized, which are not supported in earlier versions of eDirectory.

Steve Krall

Re: User-ID - Lotus Domino v6.5.2

rapoint_person — Wed, 02 Mar 2011 20:59:21 GMT

Well, I'll go the opposite way and say it might be possible, but it will be tricky. Tricky meaning manual labor 😉

The LDAP-agent has the UID XML-api that can be used to push user-ip mappings in to the PAN-device. As I said, it is an API, so it does involve some development on your end to poll data from your Domino server and feed the API. I suggest you look in to it, just might be doable

Re: User-ID - Lotus Domino v6.5.2

migration — Thu, 03 Mar 2011 10:03:22 GMT

Thanks, ill look in to it

Cheers

Marc