topic ISE 3.2 Integration with OpenLDAP Linux Shcema Problem in Network Access Control

ISE 3.2 Integration with OpenLDAP Linux Shcema Problem

Rizaldo Frendy Kurniawan — Tue, 24 Oct 2023 16:15:36 GMT

Hi All,

Anyone ever integrate the ISE with Open LDAP? I just little confuse with the Schema that I must input on 'LDAP Identity Source' menu.

With these configuration, I can retrieve groups from my LDAP, but the user on LDAP can't be retrieve from ISE. I tested it with Admin Access, which is the Admin Access of ISE I've forward to LDAP Server, and it still say wrong username/password on login prompt.

Anybody got the same problem with me?

Re: ISE 3.2 Integration with OpenLDAP Linux Shcema Problem

Arne Bier — Thu, 02 Nov 2023 20:34:56 GMT

Hi @Rizaldo Frendy Kurniawan

I was also struggling when I tried to integrate ISE with Windows Active Directory using LDAP. I had to modify the Subject Name Attribute to use sAMAccountName.

How did I figure this out? I used an LDAP explorer tool - there are many - e.g. LDAPSort LDAP Browser. I looked up my user account, then sorted the attribute VALUES list, looking for any attributes that contained the USERNAME I want to see in ISE. And there was only one attribute.