For details on cookie usage on our site, read our Privacy Policy
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
RedHat IPA authentication on Palo Alto
- LIVEcommunity
- Collaboration
- Discussions
- General Topics
- RedHat IPA authentication on Palo Alto
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
RedHat IPA authentication on Palo Alto
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
02-03-2020 10:44 PM
Hi,
When using RedHat or CentOS IPA authentication on Palo Alto firewall, we may ran into challenges when adding LDAP Server Profile and GP Clients functionality related issues.
- LDAP Server Profile - On a traditional RedHat or CentOS IPA server there will be multiple ou under the Base DN, In order to work properly along with Palo Alto Server profile. we have to choose the right ou as SpoilerNote :- On IPA environment Containers(cn) are replaced by uid and Organization Units(ou) are replaced by cn.cn=accounts,dc=example,dc=com
- GP Client functionality related issue - Recent release of Linux GP client both UI and CLI based version may not work properly. Issue are, unable to open the application, input cannot be performed on the GP Applications for IPA Based users. To over come this make sure that the users shell is bash by default.
Thanks!
- Mark as New
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report This Content
02-04-2020 05:53 AM
Hi @vjbennet ,
Awesome information ! Thanks for the heads up !
Cheers,
-Kiwi
Cheers,
Kiwi
Don't forget to hit that Like button if a post is helpful to you!
- New GP Client Install in GlobalProtect Discussions
- Globalprotect clientless portal link persistence using SAML through cloud identity engine. in Next-Generation Firewall Discussions
- MFA - LDAP ( Active Directory ) Radius/Tacacs+ Internal Resource Access in General Topics
- User to IP mapping for LAN with computer on hybernet/sleep in General Topics
- Global Protect w Azure SAML/MFA won't trigger logon dialog box in GlobalProtect Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
