Ubuntu_OpenLDAP with PAN-OS User id

[SubaMuthuram]

Hi All,

Is there any document which will show how to configure Ubuntu based OpenLADP as a user id agent with Palo Alto firewalls.

How to add the LDAP server into Server monitoring profile. 

[SCantwell_IM]

Hello there

You can use this article https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGnCAK

Or you can look at the Admin guide:  https://docs.paloaltonetworks.com/pan-os/8-1/pan-os-web-interface-help/device/device-server-profiles...

[Arun_R]

Hi @SubaMuthuram,

Is it done ?

integrating OpenLDAP with PA firewall.

Here i have a scenario where i have configured OpenLDAP for Global Protect and Captive Portal authentication, Which is working fine.

But i need to configure Server monitoring (PANOS User-ID agent) or Windows User-ID agent integration for fetching user to IP mapping details.

But i cant find any documents regarding this.

Iam unable to install User-ID agent into my Linux server where i enabled OpenLDAP.

Please help me in this if you found a solution.

Thanks in advance.

[Alejandro_Hernandez]

Hi @Arun_R 

The user agent software is only for windows not for Linux, you only can use the user-id integration agent into the firewall

The monitored server only works for this services

[Arun_R]

Hi @Alejandro_Hernandez ,

Thank you so much for your reply.

In PAN-OS integrated User-ID - Server monitoring.

Iam confused on choosing the type, cause there's no Lunix based or anything about OpenLDAP mentioned on drop down.

Which one should i choose, 

Please help me in this.

[kiwi]

Hi @Arun_R ,

Looking at the compatibility matrix I don't think it's supported:

https://docs.paloaltonetworks.com/compatibility-matrix/user-id-agent/which-servers-can-the-user-id-a...

Kind regards,

-Kim.