RedHat IPA authentication on Palo Alto

[vjbennet]

Hi,

When using RedHat or CentOS IPA authentication on Palo Alto firewall, we may ran into challenges when adding LDAP Server Profile and GP Clients functionality related issues.

1. LDAP Server Profile - On a traditional RedHat or CentOS IPA server there will be multiple ou under the Base DN, In order to work properly along with Palo Alto Server profile. we have to choose the right ou as 
   Spoiler

   cn=accounts,dc=example,dc=com
   Note :- On IPA environment Containers(cn) are replaced by uid and Organization Units(ou) are replaced by cn.
2. GP Client functionality related issue - Recent release of Linux GP client both UI and CLI based version may not work properly. Issue are, unable to open the application, input cannot be performed on the GP Applications for IPA Based users. To over come this make sure that the users shell is bash by default.

Thanks!

[kiwi]

Hi @vjbennet ,

Awesome information ! Thanks for the heads up !

Cheers,

-Kiwi