topic Re: FMC - LDAP External Authentication in Network Security

FMC - LDAP External Authentication

AntonioMacia — Fri, 25 Feb 2022 16:33:56 GMT

Hi,

I'm getting invalid credentials error while trying to connect integrate the FMC with my AD for external authentication. The exact error is:

Opening connection to LDAP server - 10.20.20.10:389 - cn=user,dc=domain,dc=local
Current TLS Require Cert: 0
binding
ldap bind invalid credentials error: 49

I tried with multiple accounts with domain admin privileges. Actually, I have other appliances like ISE correctly integrated with the same AD using the same credentials. There is no firewall in between, same subnet. Also the AD has the local firewall disabled. Any idea?

Thanks.

Re: FMC - LDAP External Authentication

balaji.bandi — Fri, 25 Feb 2022 17:30:38 GMT

what version of FMC, how about try to LDAP user account you using

useradmin@domain.com ?

Re: FMC - LDAP External Authentication

Rob Ingram — Fri, 25 Feb 2022 18:51:10 GMT

@AntonioMacia can the FMC resolve the DNS names of the LDAP servers?

When you configure LDAP, did you select "Active Directory" as the server type? It could be related to the attribute used to query AD.

https://www.cisco.com/c/en/us/td/docs/security/firepower/623/configuration/guide/fpmc-config-guide-v623/user_accounts_for_management_access.html