LDAP query with ASA

[Tuba]

I have configured IDFW (There is LDAP connection with the AD parent domain ), 

ASA and the users are all over the AD forest. We can query the users inside the parent domain but not at the child domains.

Is there a possibility to configure LDAP with parent domain and query all the users in AD forest tree or it’s a must to add all the child domains separately as well?

[Rolando Valenzuela]

Can you shared your configuration? I wonder if it is an access problem of the AD user you are using or the ldap base you configured.

Have you tried adding: ldap-scope subtree command?

ref: https://community.cisco.com/t5/security-documents/asa-idfw-identity-firewall-step-by-step-configuration/ta-p/3127806

Rolando A. Valenzuela.