topic Base DN searching bug in Identity Source Configuration from FTDv v6.4-6.6 in Network Security

Base DN searching bug in Identity Source Configuration from FTDv v6.4-6.6

spark.zhang — Tue, 06 Oct 2020 08:51:49 GMT

Hi, I think there is a bug in AD Identity objects downloading in FTDv ver6.4-6.6.

When I set the Base DN to includes a sub OU which like "OU=Users,DC=firepower,DC=local", and deploy the configuration, none of users or groups will be downloaded.

If I change the Base DN to root path which like "DC=firepower,DC=local", the users & groups has successfully downloaded.

Please check the attached video for details.

Re: Base DN searching bug in Identity Source Configuration from FTDv v6.4-6.6

Mohammed al Baqari — Tue, 06 Oct 2020 09:50:20 GMT

Hi, are you sure the "Users" is OU not CN. Just make sure that you are
defining the right path. You can use tools (3rd party) to identify if your
path is working before applying it to FMC.

**** please remember to rate useful posts

Re: Base DN searching bug in Identity Source Configuration from FTDv v6.4-6.6

spark.zhang — Tue, 06 Oct 2020 10:01:05 GMT

Hi Mohammed,

Thanks for your reply. I'm sure that the DN was correct.

And I know that the DN of default Users object in AD is "CN=Users". "OU=Users,DC=firepower,DC=local" is just for example.

In the attached example video, I used "ou=firepower,dc=firepower,dc=local" as Base DN, but it's also didn't work.

Re: Base DN searching bug in Identity Source Configuration from FTDv v6.4-6.6

Mohammed al Baqari — Tue, 06 Oct 2020 11:42:20 GMT

Understood. Have you verified the permissions. Also run a capture between
FMC and DC to see the messages in case of any error. They are in readable
format.

***** please remember to rate useful posts