topic Re: RedHat IPA authentication on Palo Alto in General Topics

RedHat IPA authentication on Palo Alto

vjbennet — Tue, 04 Feb 2020 06:44:09 GMT

Hi,

When using RedHat or CentOS IPA authentication on Palo Alto firewall, we may ran into challenges when adding LDAP Server Profile and GP Clients functionality related issues.

LDAP Server Profile - On a traditional RedHat or CentOS IPA server there will be multiple ou under the Base DN, In order to work properly along with Palo Alto Server profile. we have to choose the right ou as cn=accounts,dc=example,dc=com Note :- On IPA environment Containers(cn) are replaced by uid and Organization Units(ou) are replaced by cn.
GP Client functionality related issue - Recent release of Linux GP client both UI and CLI based version may not work properly. Issue are, unable to open the application, input cannot be performed on the GP Applications for IPA Based users. To over come this make sure that the users shell is bash by default.

Thanks!

Re: RedHat IPA authentication on Palo Alto

kiwi — Tue, 04 Feb 2020 13:53:26 GMT

Hi @vjbennet ,

Awesome information ! Thanks for the heads up !

Cheers,

-Kiwi

Re: RedHat IPA authentication on Palo Alto

PyiePhyoHtay — Fri, 10 Mar 2023 03:20:30 GMT

Dear Kiwi,

How can i integrate with the Redhat IPA server authentication on Palo Alto Firewall, I can't find documentation for this cloud you please share or guide for the configuration.

Many Thanks.

Re: RedHat IPA authentication on Palo Alto

vjbennet — Fri, 10 Mar 2023 14:16:47 GMT

Hi @PyiePhyoHtay ,

Refer document https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGnCAK

Reg

John Bennet V