This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD for multiple sites or adding local users from CLI

Hi All,

 

We have a couple UTM 9s in HA and working well. We have multiple client domains and now tasked with adding in the ability for each client to be able to login to the users portal to manage their logs and lists. Have AD working well enough except for when we add two domains in that have the same username i.e accounts its either one or the other synced as a local user and wont work. Ideally we would like to have the email address as the username as AD does also return all the alias email addresses when it syncs but after speaking with sophos support this doesn't seem possible, ive tried also with radius backend but radius cannot send a reply back to populate the email field so this was a dead end also.

What have other people been doing to get around this? I have toyed with the idea of running some exim boxes infront of the UTM that do recipient callback verfication, collate a list of valid emails and manually add these as local users on the UTM but would need to automate this somehow, is there CC commands that can be run? Ideally we would like to add each valid email address that receives email as a local user and email as that email, with a common client password for each domain i.e sales@domain.com password blah123, support@domain.com password blah123 etc 

we have over 100 domains looking to move from luxsci since its closing but we need to have this login ability for the quarantine etc and im running out of ideas on how i can make this work :(

 

any ideas appreciated



This thread was automatically locked due to age.
Parents
  • Well, I guess you could do it with cc, but I'm not one that would know how to script it for you.  I could recommend someone that you might want to hire.  In any case, you would want to clear it with Sophos to avoid losing your support contract.  My bold below with commands highlighted:

     # cc get_user_by_name testuser 

            {
              'autoname' => 0,
              'class' => 'aaa',
              'data' => {
                          'acc_managed' => 0,
                          'allowed_networks' => [
                                                  'REF_NetworkAny'
                                                ],
                          'authentication' => 'remote',
                          'backend_update' => 1,
                          'clearpass' => '',
                          'comment' => 'synced from adirectory',
                          'email_primary' => 'testuser@domain.com',
                          'email_secondary' => [],
                          'enabled' => 0,
                          'lastauth_backend' => '',
                          'lastauth_facility' => '',
                          'lastauth_time' => 0,
                          'loc' => 'english',
                          'md4hash' => '',
                          'name' => 'testuser',
                          'network' => 'REF_NetAaaTestuUserNetwo',
                          'pop3_accounts' => [],
                          'ras_ip' => '0.0.0.0',
                          'ras_online' => 0,
                          'realname' => 'test user',
                          'sender_blacklist' => [],
                          'sender_whitelist' => [],
                          'status' => 1,
                          'use_ras_ip' => 0,
                          'user_preferences' => '',
                          'x509_cert' => 'REF_IpsX507',
                          'x509_cert_gost' => ''
                        },
              'hidden' => 0,
              'lock' => '',
              'nodel' => '',
              'ref' => 'REF_AaaUseTestuser',
              'type' => 'user'
            }

    # cc get_object 'REF_AaaUseTestuser' | grep 'email_primary'
                          'email_primary' => 'testuser@domain.com',

    # cc change_object 'REF_AaaUseTestuser' 'name' 'testuser@domain.com'
    REF_AaaUseTestuser

    Cheers - Bob

Reply
  • Well, I guess you could do it with cc, but I'm not one that would know how to script it for you.  I could recommend someone that you might want to hire.  In any case, you would want to clear it with Sophos to avoid losing your support contract.  My bold below with commands highlighted:

     # cc get_user_by_name testuser 

            {
              'autoname' => 0,
              'class' => 'aaa',
              'data' => {
                          'acc_managed' => 0,
                          'allowed_networks' => [
                                                  'REF_NetworkAny'
                                                ],
                          'authentication' => 'remote',
                          'backend_update' => 1,
                          'clearpass' => '',
                          'comment' => 'synced from adirectory',
                          'email_primary' => 'testuser@domain.com',
                          'email_secondary' => [],
                          'enabled' => 0,
                          'lastauth_backend' => '',
                          'lastauth_facility' => '',
                          'lastauth_time' => 0,
                          'loc' => 'english',
                          'md4hash' => '',
                          'name' => 'testuser',
                          'network' => 'REF_NetAaaTestuUserNetwo',
                          'pop3_accounts' => [],
                          'ras_ip' => '0.0.0.0',
                          'ras_online' => 0,
                          'realname' => 'test user',
                          'sender_blacklist' => [],
                          'sender_whitelist' => [],
                          'status' => 1,
                          'use_ras_ip' => 0,
                          'user_preferences' => '',
                          'x509_cert' => 'REF_IpsX507',
                          'x509_cert_gost' => ''
                        },
              'hidden' => 0,
              'lock' => '',
              'nodel' => '',
              'ref' => 'REF_AaaUseTestuser',
              'type' => 'user'
            }

    # cc get_object 'REF_AaaUseTestuser' | grep 'email_primary'
                          'email_primary' => 'testuser@domain.com',

    # cc change_object 'REF_AaaUseTestuser' 'name' 'testuser@domain.com'
    REF_AaaUseTestuser

    Cheers - Bob

Children
No Data