topic Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit in Network Security

ASDM not displaying options for RADIUS/LDAP attributes in DAP editor

Brian Dean — Wed, 09 Feb 2022 23:00:02 GMT

Currently having an issue with ASDM version 7.17(1) where the ldap or radius attribute text boxes aren't displaying when editing a DAP policy. It won't even display existing dap policies with attributes already defined. Anyone else have this problem? Screenshot attached.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

balaji.bandi — Wed, 09 Feb 2022 23:13:30 GMT

what is the version of ASA code running on the device ?

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

Brian Dean — Wed, 09 Feb 2022 23:22:18 GMT

ASA: 9.14(3)15

ASDM: 7.17(1) (OpenJRE)

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

balaji.bandi — Wed, 09 Feb 2022 23:35:39 GMT

Looks ok, check some troubleshooting tips :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91831-mappingsvctovpn.html

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

Brian Dean — Thu, 10 Feb 2022 12:59:40 GMT

Thanks, but this feels like an ASDM gui bug. I can't find any mention of this particular issue in that article. Existing DAP attributes work fine.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

timetrade — Sun, 27 Feb 2022 00:52:19 GMT

I'm facing the same problem 7.17.152. Existing rules work fine, no ability to edit or create new rules.

https://community.cisco.com/t5/network-security/asa-9-14-4-and-asdm-7-17-152-not-showing-any-ldap-groups-in-dap/m-p/4560243#M1087721

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

timetrade — Sun, 27 Feb 2022 01:28:45 GMT

I rolled back to 7.16.150 and the LDAP groups are working again. Clearly a bug in 7.17.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

balaji.bandi — Sun, 27 Feb 2022 08:59:00 GMT

time to raise an TAC and report.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

Marcus Hunold — Thu, 31 Mar 2022 07:39:09 GMT

same issue here:

9.14(4)

asdm-7171-152 (OpenJRE)

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

balaji.bandi — Thu, 31 Mar 2022 10:35:43 GMT

time to raise an TAC and report.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

Marcus Hunold — Thu, 31 Mar 2022 11:27:11 GMT

Don't think so. I am tired to be a bug finder for Cisco products...

That this bug exists seems to be confirmed and documented here.

It is a community - so from Cisco perspective they could read this here and should raise a ticket by their own internally.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

agena-netzwerk — Wed, 27 Jul 2022 08:26:23 GMT

Same Issue here, i opened a TAC case and got feedback to move back to ASDM 7.16.1.150.
Bug Tracker URL: https://bst.cisco.com/quickview/bug/CSCwa99370
As more TAC Cases are on this problem, this get more priority. So please open a TAC case too, this version is vulnerable...

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

dporod — Thu, 11 Aug 2022 12:39:57 GMT

Same

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

Rob Ingram — Thu, 11 Aug 2022 13:18:09 GMT

@dporod it's resolved in ASDM 7.18 or alternatively rollback to 7.16

https://www.cisco.com/c/en/us/td/docs/security/asdm/7_18/release/notes/rn718.html

https://community.cisco.com/t5/vpn/i-can-t-add-aaa-attribute-type-ldap/td-p/4583301

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

dporod — Wed, 17 Aug 2022 19:09:21 GMT

7.18 does work on 9.16 ASA but still not on 9.14. We have a 5516x on 9.16 and a 5525x on 9.14 (last available version). I can downgrade to 7.16 to edit RADIUS DAP but don't believe I can use 7.16 with 9.16.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

agena-netzwerk — Fri, 19 Aug 2022 08:18:46 GMT

Yesterday I installed ASA 9.16.3.19 with ASDM 7.18.1.152 and it's working fine.
Direkt Update from 9.14 run into a cert failure, so I installed 9.15 first before Upgrade to 9.16.

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

t3rebello — Wed, 14 Sep 2022 17:35:40 GMT

I am having this issue as well. Does anyone know how we can achieve the same configuration from the CLI?

I tried searching for our current DAP's and I can only find the DAP's themselves, not the actual users configured beneath them.

That also makes me wonder, when restoring a configuration backup from the CLI, how would it accommodate these usernames?

Re: ASDM not displaying options for RADIUS/LDAP attributes in DAP edit

agena-netzwerk — Thu, 20 Oct 2022 09:42:25 GMT

As I know from CLI it's not possible, there is a DAP.xml which can be edited, but it's not recommended to do so.
Beter try to update your Appliance.