About jeromej

Hi @Raido_Rattameister ,   There is no packet sent/received when checking with tcpdump. ... View more

Yes @Raido_Rattameister , PA mgmt interface and ldap server are in the same subnet. When test the handshake, I get the below result.   Thanks, Jerome     ... View more

Hi @PavelK  When checking the logs, I get the above error. It seems that there is some issue with the connectivity.  Is there a way to check if the ldap server receives the request on the port 389 from Palo alto? Since PA has removed telnet from PANOS 5.0, I couldn't find a way to know that.   Thanks, Jerome  ... View more

Hi @PavelK    I have tried the steps given in the KB and got the below result. 1.1 #show shared server-profile lda  -  Invalid syntax 1.2 The Base DN not listing automatically. It wasn't listed when I had it configured previously but the LDAP authentication worked until couple days back. 1.4 Couldn't browse the LDAP tree browser when configuring Group-Mapping.   The Bind-DN Username and password are up to date. Yet I am getting this connectivity issue. Please advice. ... View more

Hi @Raido_Rattameister  The logs shows the "auth-server-down". But when checking the connectivity between the firewall and the server is good as they both communicate with each other. Please find below the error log.   Type Threat/Content Type Config Version Generate Time Virtual System Event ID Object fmt id module Severity Description SYSTEM auth 2816 5/27/2023 11:45   auth-server-down 0 0 general critical LDAP auth server  is down !!! ... View more

Hi @Raido_Rattameister    Thanks for the response.   I have configured the authentication settings the same way that you have mentioned and was using the LDAP account for logging in to the PA Webgui for the past couple weeks. But there was some changes done by my colleague yesterday and when I tried login to the web console today, I started getting authentication error. And I felt something must be wrong with connection with the LDAP connectivity. So I tested the connectivity and got the connection error. There is no LDAP configuration issue and I double checked the same.    Is there anything that I am missing to check?   Thanks, Jerome ... View more

Hi @PavelK    Thanks for the response. I tried that already but didn't work and thought that the issue could be with the authentication settings in the management window. And I have configured the LDAP authentication and started using the LDAP account for logging in to the PA Webgui for the past couple weeks. There was some changes done by my colleague yesterday and when I tried login to the web console today, I started getting authentication error. And I felt something must be something wrong with connection with the LDAP connectivity. So I tested the connectivity and got the connection error. There is no LDAP configuration issue and I double checked the same.  Is there anything that I am missing to check?   Thanks, Jerome ... View more