topic Re: Want to configure two different domain for LDAP Authentication. in General Topics

Want to configure two different domain for LDAP Authentication.

OsamaKhan — Mon, 30 Nov 2020 10:35:56 GMT

Hi Team,

Can we configure two different domain in PA firewall? will it work for global protect authentication?

Re: Want to configure two different domain for LDAP Authentication.

Mick_Ball — Mon, 30 Nov 2020 12:33:21 GMT

should be OK, add an auth profile for each domain and either restrict via group membership or just add both to the authentication sequence.

Re: Want to configure two different domain for LDAP Authentication.

OsamaKhan — Mon, 04 Jan 2021 16:27:02 GMT

Hi @Mick_Ball,

There is only one setting on the server monitor account. Now I can only add one username in the setting but what about the different domain.

Is it because of this setting on server monitoring it showing access denied?

Please clarify on that.

Re: Want to configure two different domain for LDAP Authentication.

BPry — Mon, 04 Jan 2021 23:59:02 GMT

@OsamaKhan,

Your original question was worded poorly. The integrated user-id agent is a different thing, and you absolutely can't configure it to access two separate domains. You'll want to actually use the user-id agent and install it on the respective domains, and then have your firewall pull user-id from the respective user-id agents installations.