topic Re: LDAP query with ASA in Network Security

LDAP query with ASA

Tuba — Fri, 13 Sep 2019 16:28:57 GMT

I have configured IDFW (There is LDAP connection with the AD parent domain ),

ASA and the users are all over the AD forest. We can query the users inside the parent domain but not at the child domains.

Is there a possibility to configure LDAP with parent domain and query all the users in AD forest tree or it’s a must to add all the child domains separately as well?

Re: LDAP query with ASA

Rolando Valenzuela — Fri, 13 Sep 2019 17:09:04 GMT

Can you shared your configuration? I wonder if it is an access problem of the AD user you are using or the ldap base you configured.

Have you tried adding: ldap-scope subtree command?

ref: https://community.cisco.com/t5/security-documents/asa-idfw-identity-firewall-step-by-step-configuration/ta-p/3127806

Rolando A. Valenzuela.