Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About psuJohn
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About psuJohn
11-02-2018
6Posts
1Like
0Solutions
Nov 02, 2018Last Visited
User
Activity
User
Profile
Latest posts by psuJohn
| Subject | Views | Posted |
|---|---|---|
| 3376 | 09-20-2018 06:13 AM | |
| 1909 | 09-19-2018 02:32 PM | |
| 982 | 09-19-2018 02:27 PM | |
| 2619 | 09-19-2018 02:13 PM | |
| 3399 | 09-19-2018 12:43 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 09-19-2018 02:32 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 11-09-2017 07:34 AM |
| Date Last Visited | 11-02-2018 11:30 AM |
| Posts | 6 |
| Total Likes Received | 1 |
09-20-2018
06:13 AM
Not disagreeing it is my expedition server, but if you are doing log forwarding or at a minium whomever has access to the cli has access to the logs until it gets rotated out and deleted. ( I haven't checked the logrotate settings)
Might I also suggest when you change that auth test to a post you also purge the apache2 accept logs or at least the values in those logs?
... View more
09-19-2018
02:32 PM
1 Kudo
There is currently no way to specifiy a prefix login attribute for binding to a ldap server. Our linux ldap server needs a DN along the lines of 'uid=<userid>,dc=<part1>,dc=<part2>' I can put the ', dc=<part1>,dc=<part2>' in the suffix but I have no way to force a prefix.
Thanks
... View more
- Tags:
- feature request
09-19-2018
02:27 PM
When I am tcpdumping the connecting to an ldap server I can't see any differences between these two options from a quick look at the packet captures. What is the difference?
... View more
09-19-2018
02:13 PM
If tsl is a typo for tls, when I tcpdump the connection I don't see any attempts to start TLS.
... View more
09-19-2018
12:43 PM
Warning if you use the test button next to an ldap server the userid and password are stored in clear text in /var/log/apache2/access.log since they are passed in the URL.
Example:
<IP> - - [19/Sep/2018:14:28:22 -0500] "GET /bin/authentication/servers/loginServers.php?_dc=1537385302801&id=1&type=LDAP&action=test&admin_user=<userid>&admin_ password=<password> HTTP/1.1" 200 749
this is on version 1.0.105
... View more
09-19-2018
12:33 PM
WARNING!!
Using the test button logs your username and password in the apache logs(it is put in the URL called to do the test)
I will be opening a case as well.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
11-02-2018
11:30 AM
|
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
