LDAP Authentication

[grkchr]

Hello all,

I'm running on a PA5050 and I'm wondering how I specify what groups I want to have specific access to the WebUI using LDAP authentication. Also, is there a way to setup automatic account creation for new accounts that login using LDAP or do I still need to manually add everyone?

Thanks in advance.

[kfindlen · Accepted solution]

When using LDAP authentication you must specify each administrator manually and specify the authentication profile for LDAP on a per-user basis.  Within the LDAP authentication profile you can specify an allow list based on group, but since you have to create each admin individually providing the group filter may be redundant.

[grkchr]

Thanks. This is what I was looking for.

[apasupulati]

Hello,

Just another side note, you can use Radius authentication with VSAs if you want to avoid creating users on the firewall. The VSAs can pull the username and the admin role automatically.

You can view this document for more details and to get help setting it up:

Thanks,

Aditi

[jerick]

Hello

Here is my configuration on LDAP

*Group Objects

Search Filter:

Object Class: posixGroup

Group Name: cn

Group Member: memberUid

*User Objects

Search Filter:

Object Class: person

User Name: uid

hope this help

Jerick