Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 4 subscribers
  • Views 2851 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LDAP Backend Dynamic Group

Gary Burch

Hi Everyone,

 

I'm a new user of the UTM Firewall, apologies for asking a basic question, but I can't seem to find the answer anywhere.

 

I'm trying to create a new group dynamic group using LDAP as a backend.  To be part of this group, the users must be members of a certain group in the LDAP Database.  In this case, the LDAP Database is provided by Active Directory.  I have Authentication Servers created and tested for Active Directory and LDAP.  I have a group created with Backend Membership set to LDAP, and checking the LDAP attribute 'member' (have also used some others I found reference to online, but can't remember them now).  The Value is filled out with the full Distinguished Name of the group in Active Directory.

 

When I test a user on the Authentication Services -> Servers page, it authenticates the user successfully, but reports no groups.  If I create a new LDAP group and don't check an LDAP attribute (i.e. all LDAP users), the same user authenticates and reports it's a member of my 'All LDAP Users' group.

 

I assume I've configured something wrong with the LDAP Group, but I can't find any documentation that gives the correct settings.

 

Can anyone point me in the right direction?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to BAlfson

    Hi, thanks for the reply.

     

    I got to the bottom of this issue earlier today, and managed to get it working.  I changed the LDAP attribute that the group was checking to 'memberOf'(having had several different values for this field previously. Since doing that, it's authenticating correctly.