Support for Open LDAP

[mbs.admin]

Hi All,

Does Palo Alto supports LDAP running in Linux operating systems? If yes, does the configuration is the same when using active directory?

Thanks,

Rex

[TheSquire]

Hi Rex,

Palo should support open ldap and certainly states so in the admin guide.  There is no predefined type for openldap so I suspect you'll need to set to other and so if creating group mappings etc you may need to check the attributes used and possibly tweak them for your ldap.  I believe these are normally configured by default according to ldap type specified in the server profile when using active directory etc.

[cchristiansen · Accepted solution]

Hello Rex,

Yes the Palo Alto Appliances do support Open LDAP, and no the configuration may not be the same as for Active Directory.  Your Open LDAP configuration will vary based on your implementation of Open LDAP (explained further in this document).

Hope this helps,

-chadd.

Here is a link to a document that may prove helpful: LDAP Overview.pdf

[mgp]

Hi Chadd,

Any update for step by step with Open LDAP ?

Are it possible to make single sign on like in AD ?

Thanks.

[mbutt]

Below doc explains how to exactly setup OPEN LDAP profile on firewall on page 9 and has other step by step information for setting it up.

https://live.paloaltonetworks.com/docs/DOC-5315

Let us know if this helps you achieve what you are looking for.

Thank you

Numan

[mgp]

Hi Numan,

That's detail document. Thanks.

But can PANW do single sign on like in Active Directory ? Because i see it use Captive Portal.

Thanks.

[mbutt]

I think once you have all the LDAP part configured correctly. The SSO feature should work as well.

Hope this helps.

Numan

[luancb]

I can not download document, please send me to email luan.trinh@vietsunshine.com.vn

Many thanks !

[dragomi-dimitro]

Hello all,

the links do not seem to work now - can anyone provide an updated version, please?

Thank you in advance!