LDAP Auth to WebUI if Directory Server is not reachable.

JoshFountaine — Mon, 21 May 2018 20:58:34 GMT

Just throwing this out there to see if there is some solution.

We want to enable LDAP auth to our PA's for our admins. I have the Auth profile configured and working well as long as the directory server is up.

In the odd case that we have a system failure of the LDAP directory server or a firewall rule inadvertently gets removed that blocks access from the PAs to the directory server, is there a way to have a fallback authentication that used the last known password from the LDAP server (cached login information)? or do we need to have 2 administrator accounts for all of our admins, (one local and one with the auth profile)?

Let me know if this doesn't make sense and I can try to explain further, or just tell me that I am completely off-base trying to do this. That is fine too.

Re: LDAP Auth to WebUI if Directory Server is not reachable.

OtakarKlier — Tue, 22 May 2018 04:51:11 GMT

Hello,

Sounds like you have a requiremet that you cannot 'share' accounts. If that is the case then yes you will need two accounts for each admin. If you are allowed to have a single 'emergency' account, then you can just use the one admin account. I would say have the PAN look at multiple LDAP servers just for this reason.

Hope that helps.

topic Re: LDAP Auth to WebUI if Directory Server is not reachable. in General Topics

LDAP Auth to WebUI if Directory Server is not reachable.

Re: LDAP Auth to WebUI if Directory Server is not reachable.