topic Adding an AAA LDAP Server on Catalyst 9800 Wireless controller in Wireless

Adding an AAA LDAP Server on Catalyst 9800 Wireless controller

O.K. — Wed, 19 Apr 2023 09:12:52 GMT

Hello,

When I try to add an LDAP server on Cisco Catalyst 9800-L Wireless Controller (17.3.6), I get an error which says "Invalid User Base DN"

I' aware user base DN shouldn't contain a space character, but domain controller i not under my control and there is a white space in OU name.

I've already tried to put the whole string into single quotes (') and value of the OU into double quotes ("), but WLC doesn't like them.

I've also tried to escape with backslash (\) also it didn't worked.

Here is the example:

'OU="test 1",OU=test,DC=int,DC=at' --> If I delete the white space between "test" and "1" it works.

Has anyone experienced such a issue?

Thanks in advance!

Regards.

Re: Adding an AAA LDAP Server on Catalyst 9800 Wireless controller

Mark Elsen — Tue, 18 Apr 2023 16:40:42 GMT

>... but domain controller i not under my control
- Then there's not much you can do if the 9800 won't take it , you may have a try with IOS-XE 17.9.3 (note: also supports the older generation Wave 1 APs again) , or perhaps edit LDAP server with GUI (if done , reverse this mark to CLI (...))

Re: Adding an AAA LDAP Server on Catalyst 9800 Wireless controller

Scott Fella — Tue, 18 Apr 2023 16:50:48 GMT

Just to add.... like @Mark Elsen mentioned, you are pretty much out of luck if you can't work with he team that manages the directory services. Your only work around would be for them to create a new group and add users to that new group, or else get a radius server and use that to build your policies, which I think is so much better.

Re: Adding an AAA LDAP Server on Catalyst 9800 Wireless controller

O.K. — Thu, 20 Apr 2023 08:15:48 GMT

Hi,
thank you for your reply. I've tried both (CLI and GUI) and multiple possible solutions (like escaping special characters etc.) but without luck. What I can't follow is Cisco has accepted white space on the old wireless controllers.

Re: Adding an AAA LDAP Server on Catalyst 9800 Wireless controller

Mark Elsen — Thu, 20 Apr 2023 09:23:27 GMT

- Then you need to confront Cisco with that argument and create a TAC case.

M.

Re: Adding an AAA LDAP Server on Catalyst 9800 Wireless controller

Scott Fella — Thu, 20 Apr 2023 13:53:54 GMT

Not everything gets moved over, AireOS and the IOS-XE is different platforms as you know. everyone wanted everything in AireOS, why would they build a new platform. Like what @Mark Elsen mentioned, bring this up to TAC or your Cisco SE and see if they can possibly add this to future releases. As of now, you need to figure out another way.