This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies.
For details on cookie usage on our site, read our Privacy Policy
For details on cookie usage on our site, read our Privacy Policy
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
- Panorama
- AIOps for NGFW
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- Cloud NGFW for AWS
- CN-Series
- VM-Series:
- Private Cloud
- OCI
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
- Cortex Xpanse
Security Operations
- Resources
About psuJohn
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About psuJohn
06-23-2021
6Posts
1Like
0Solutions
Jun 23, 2021Last Visited
User
Activity
User
Profile
Latest posts by psuJohn
| Subject | Views | Posted |
|---|---|---|
| 4039 | 09-20-2018 06:13 AM | |
| 2389 | 09-19-2018 02:32 PM | |
| 1207 | 09-19-2018 02:27 PM | |
| 3025 | 09-19-2018 02:13 PM | |
| 4062 | 09-19-2018 12:43 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 09-19-2018 02:32 PM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 2 Likes |
User Badges
Community Statistics
| Member Since | 11-09-2017 07:34 AM |
| Date Last Visited | 06-23-2021 10:42 AM |
| Posts | 6 |
| Total Likes Received | 1 |
09-20-2018
06:13 AM
Not disagreeing it is my expedition server, but if you are doing log forwarding or at a minium whomever has access to the cli has access to the logs until it gets rotated out and deleted. ( I haven't checked the logrotate settings)
Might I also suggest when you change that auth test to a post you also purge the apache2 accept logs or at least the values in those logs?
... View more
09-19-2018
02:32 PM
1 Kudo
There is currently no way to specifiy a prefix login attribute for binding to a ldap server. Our linux ldap server needs a DN along the lines of 'uid=<userid>,dc=<part1>,dc=<part2>' I can put the ', dc=<part1>,dc=<part2>' in the suffix but I have no way to force a prefix.
Thanks
... View more
- Tags:
- feature request
09-19-2018
02:27 PM
When I am tcpdumping the connecting to an ldap server I can't see any differences between these two options from a quick look at the packet captures. What is the difference?
... View more
09-19-2018
02:13 PM
If tsl is a typo for tls, when I tcpdump the connection I don't see any attempts to start TLS.
... View more
09-19-2018
12:43 PM
Warning if you use the test button next to an ldap server the userid and password are stored in clear text in /var/log/apache2/access.log since they are passed in the URL.
Example:
<IP> - - [19/Sep/2018:14:28:22 -0500] "GET /bin/authentication/servers/loginServers.php?_dc=1537385302801&id=1&type=LDAP&action=test&admin_user=<userid>&admin_ password=<password> HTTP/1.1" 200 749
this is on version 1.0.105
... View more
09-19-2018
12:33 PM
WARNING!!
Using the test button logs your username and password in the apache logs(it is put in the URL called to do the test)
I will be opening a case as well.
... View more
Contact Me
| Online Status |
Offline
|
| Date Last Visited |
06-23-2021
10:42 AM
|
LEGAL NOTICES
Copyright 2007 - 2022 - Palo Alto Networks