topic Re: NAC AD SSO Mapping Rules in Network Security

NAC AD SSO Mapping Rules

alex goshtaei — Fri, 21 Feb 2020 11:45:27 GMT

Hi,

I've configured AD SSO and chose "ldap lookup server" to none and everything worked fine and put all users to default role in AD SSO configuration.

Now I need to configure different user role based on user membership in AD. So I configured lookup server and add it to AD SSO server. then confiured mapping rules and put "memberof" attribute in LDAP. But it doesn't work. still all users login to the default role, and it seems LDAP lookup server and mapping rules doesn't receive memberof attribute from AD.

any suggestion would be very appreciated.

thanks

Alex

Re: NAC AD SSO Mapping Rules

Faisal Sehbai — Sun, 25 Oct 2009 03:06:10 GMT

Alex,

Check with Auth Test to see what attributes are being returned with your LDAP server.

Faisal

Re: NAC AD SSO Mapping Rules

alex goshtaei — Mon, 26 Oct 2009 21:30:30 GMT

Hi Faisal,

in auth test tab, I don't see AD SSO or lookup server as provider.

thanks again,

Alex

Re: NAC AD SSO Mapping Rules

Faisal Sehbai — Mon, 26 Oct 2009 23:14:02 GMT

Alex,

Depends on the version if they would be visible or not, but you can also setup a LDAP lookup server with the same settings as your lookup server and do an auth test with that.

HTH,

Faisal

Re: NAC AD SSO Mapping Rules

rc.castillo — Tue, 27 Oct 2009 06:02:16 GMT

Alex,

Check your string, it must be "memberOf", use capital "O". also, there must be no spaces in between your search strings, e.g. CN=abcd,DN=abcd

Hope this helps,

Dan