topic Re: LDAP authentication on router ssh login in Network Access Control

LDAP authentication on router ssh login

luis.poveda93 — Thu, 20 Jan 2022 15:05:47 GMT

Hello,

I´m trying to configure ldap authentication for a switch Cisco Catalyst but I got LDAP: LDAP doesn't support interactive login although the local test using test aaa authentication group has been successful.

Have any of you been capable of configuring ldap authentication towards an MS Active Directory server?

ios: Cisco IOS XE Software, Version 17.03.04

Thanks in advance.

Luis

Re: LDAP authentication on router ssh login

balaji.bandi — Thu, 20 Jan 2022 15:17:40 GMT

Not that i am aware this worked, as i remember it was not worked. (ok with GUI Login). but CLI having some issue i guess.

what is the output :

#show ldap server all ?
| Output modifiers
<cr> <cr>

may check some limitation :

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/17-2/configuration_guide/sec/b_172_sec_9500_cg/configuring_ipv6_support_for_ldap.html

Re: LDAP authentication on router ssh login

luis.poveda93 — Thu, 20 Jan 2022 15:52:26 GMT

Hello,

Thanks for the answer. The output below:

censured-1#show ldap server all
Server Information for censured-1
================================
Server name :censured-1
Server Address :10.x.x.x
Server listening Port :389
Bind Root-dn :CN=user,OU=xxx,OU=xxx,DC=xxx,DC=xxx,DC=xxx,DC=xxx,DC=xxx
Server mode :Non-Secure
Cipher Suite :0x00
Authentication Seq :Search first. Then Bind/Compare password next
Authentication Procedure:Bind with user password
Base-Dn :OU=xxx,OU=xxx,DC=xxx,DC=xxx,DC=xxx,DC=xxx,DC=xxx
Object Class :Person
Attribute map :GROUP
Request timeout :30
Deadtime in Mins :0
State :ALIVE
---------------------------------
* LDAP STATISTICS *
Total messages [Sent:6, Received:6]
Response delay(ms) [Average:506, Maximum:513]
Total search [Request:5, ResultEntry:0, ResultDone:5]
Total bind [Request:1, Response:1]
Total extended [Request:0, Response:0]
Total compare [Request:0, Response:0]
Search [Success:0, Failures:5]
Bind [Success:0, Failures:1]
Missing attrs in Entry [0]
----------------------------------
No. of active connections :1

Regards,

Luis

Re: LDAP authentication on router ssh login

luis.poveda93 — Fri, 21 Jan 2022 08:09:33 GMT

Hello,

Have you seen the output?

Regards,

Luis

Re: LDAP authentication on router ssh login

sweigle88 — Wed, 20 Jul 2022 04:51:37 GMT

@luis.poveda93 were you able to get any where with this on IOS? I was able to get this working on ASA, but haven't on IOS yet.