topic Re: New install - LDAP Auth in Wireless

New install - LDAP Auth

cgbenne42 — Tue, 10 Jun 2025 19:38:08 GMT

Hey all!

I'm setting up a new deployment and cannot get the ldap working for a secured wireless network.

I added an AD account to the top of the users OU and set it to the following in the LDAP Admin field;

cn=meraki,dc=Users,dc=intra,dc=domain,dc=gov

When I input the correct username and password for a test, I just hit the following error;

I'm able to ping the internal DC address from the AP with no issues.

Could somebody point me in the right direction for this one?

-Chloe

Re: New install - LDAP Auth

aleabrahao — Tue, 10 Jun 2025 19:40:15 GMT

Enter the IP address of your LDAP server in the Host field and the LDAP listening port which is normally 389 in the Port field.
Note: Cisco Meraki APs (MRs) will use Secure LDAP over TLS.
For LDAP admin, enter the distinguished name of the administrative account to be used by the AP to bind to your LDAP server, for example cn=admin,dc=example,dc=com, and the password.

https://documentation.meraki.com/MR/MR_Splash_Page/Configuring_Splash_Page_Authentication_with_an_LDAP_Server

Re: New install - LDAP Auth

cgbenne42 — Tue, 10 Jun 2025 19:56:45 GMT

I've entered it correctly as indicated by the KB, shown in my screenshot above, but the AP keeps failing to connect.

Re: New install - LDAP Auth

mloraditch — Tue, 10 Jun 2025 20:02:02 GMT

Are you able to do an LDAP bind using those creds from a PC on the same subnet as the APs? You can use the LDP tool to test: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/cc771022(v=ws.11)

It's also quite possible there is a Cert issue. You might need to use port 636 instead. Packet captures can really help with diagnosing LDAP connectivity issues. May want to capture the transaction on your server's NIC to verify the traffic is being received and what is happening.

Re: New install - LDAP Auth

cgbenne42 — Wed, 11 Jun 2025 14:53:25 GMT

I placed my laptop on the wireless VLAN and LDP works perfectly with the dedicated meraki account in AD. I'll see if the traffic is passing in Wireshark, but the initial testing with LDP shows a valid and successful connection.

Re: New install - LDAP Auth

cgbenne42 — Wed, 11 Jun 2025 17:56:36 GMT

After installing Wireshark and watching the traffic, I noticed a SSL/TLS error that lead me to the KB article below. It was the issue outlined in the article that directed me to a cert issue I had to fix.

Active Directory Issue Resolution Guide - Cisco Meraki Documentation

This one is good to go.

@mloraditch you sent me down the right path!