Base DN searching bug in Identity Source Configuration from FTDv v6.4-6.6

[spark.zhang]

Hi, I think there is a bug in AD Identity objects downloading in FTDv ver6.4-6.6.

When I set the Base DN to includes a sub OU which like "OU=Users,DC=firepower,DC=local", and deploy the configuration, none of users or groups will be downloaded.

If I change the Base DN to root path which like "DC=firepower,DC=local", the users & groups has successfully downloaded.

Please check the attached video for details.

[Mohammed al Baqari]

Hi, are you sure the "Users" is OU not CN. Just make sure that you are
defining the right path. You can use tools (3rd party) to identify if your
path is working before applying it to FMC.

**** please remember to rate useful posts

[spark.zhang]

Hi Mohammed,

Thanks for your reply. I'm sure that the DN was correct.

And I know that the DN of default Users object in AD is "CN=Users".  "OU=Users,DC=firepower,DC=local" is just for example.

In the attached example video, I used "ou=firepower,dc=firepower,dc=local" as Base DN, but it's also didn't work.

[Mohammed al Baqari]

Understood. Have you verified the permissions. Also run a capture between
FMC and DC to see the messages in case of any error. They are in readable
format.

***** please remember to rate useful posts