topic Re: FMC - External Authentication (LDAP) Issues in Network Security

FMC - External Authentication (LDAP) Issues

caiobomani — Fri, 23 Jul 2021 22:11:48 GMT

Hello everyone.

I'm currently setting up a FMC and while attempting to use external authentication via LDAP, for some reason the FMC is not querying properly.

Basically whenever I attempt the test the query, it only finds user machines and groups CNs , not the actual users.

As a result, it always fails to authenticate. If I place the group name instead of the user without a password it actually "succeeds" into the login test resquest.

Any thoughts on why its querying for groups and machines CNs instead of users?

Evidences attached.

Re: FMC - External Authentication (LDAP) Issues

balaji.bandi — Fri, 23 Jul 2021 23:29:24 GMT

what kind of right the user has when you adding FMC to LDAP

follow and verify the steps :

https://www.petenetlive.com/KB/Article/0001102

Re: FMC - External Authentication (LDAP) Issues

caiobomani — Mon, 16 Aug 2021 20:51:46 GMT

The user is just a member of domain users.
The problem is that whenever the FMC queries the Active Directory Tree, its looking for groups instead of users.

Does anyone has experiencing this issue before?

Re: FMC - External Authentication (LDAP) Issues

s_SiD_s — Mon, 03 Nov 2025 14:24:27 GMT

I have exactly same issue.
without test, FMC says - OK-
fmc/ftdv version 7.6.2.1 (build 3)

Test Complete: You may enter a test user name to further verify your Base Filter parameter.

then, adding user that is in the group....failed. netadmin is in ise_admins group.

binding
bind success
starting search...
base :OU=Security Groups,DC=main,DC=company,DC=com
filter :(CN=ISE_Admins)
user :netadmin
attrib :sAMAccountName
ldap_result: 0 -Success
found 1 entries...
-------------
CN=ISE_Admins,OU=ISE,OU=Security Groups,DC=main,DC=company,DC=com
sAMAccountName: ISE_Admins
-------------
search failed
Admin Users The following administrator shell access users (1) were found with this filter:
---------------
ise_admins
Users The following users (1) were found with this filter:
---------------
ise_admins
so it is looking for group...not user