cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3016
Views
1
Helpful
3
Replies

FMC - External Authentication (LDAP) Issues

caiobomani
Level 1
Level 1

Hello everyone.

I'm currently setting up a FMC and while attempting to use external authentication via LDAP, for some reason the FMC is not querying properly.

Basically whenever I attempt the test the query, it only finds user machines and groups CNs , not the actual users.

As a result, it always fails to authenticate. If I place the group name instead of the user without a password it actually "succeeds" into the login test resquest.

 

Any thoughts on why its querying for groups and machines CNs instead of users?

 

Evidences attached.

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame

what kind of right the user has when you adding FMC to LDAP 

 

follow and verify the steps :

 

https://www.petenetlive.com/KB/Article/0001102

 

BB

=====Preenayamo Vasudevam=====

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

The user is just a member of domain users.
The problem is that whenever the FMC queries the Active Directory Tree, its looking for groups instead of users.

Does anyone has experiencing this issue before?

s_SiD_s
Level 1
Level 1

I have exactly same issue.
without test, FMC says - OK-
fmc/ftdv version 7.6.2.1 (build 3)

Test Complete: You may enter a test user name to further verify your Base Filter parameter.

then, adding user that is in the group....failed. netadmin is in ise_admins group.

binding
bind success
starting search...
base :OU=Security Groups,DC=main,DC=company,DC=com
filter :(CN=ISE_Admins)
user :netadmin
attrib :sAMAccountName
ldap_result: 0 -Success
found 1 entries...
-------------
CN=ISE_Admins,OU=ISE,OU=Security Groups,DC=main,DC=company,DC=com
sAMAccountName: ISE_Admins
-------------
search failed
Admin Users The following administrator shell access users (1) were found with this filter:
---------------
ise_admins
Users The following users (1) were found with this filter:
---------------
ise_admins
so it is looking for group...not user

Review Cisco Networking for a $25 gift card