Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi guys, Dumb question How ISE validates username's password using LDAP server as the external identity store? Got unsecure (TCP/389) LDAP pcap flows between ISE and the server, doing some check and verification.I do see some search requests/response...
Hi guys, I feel like it's a noob question but my understanding always was that there should be a separate TACACS+ authorization request which is not blended into an Authentication packet: Please can you educate me, and point me to the correct KB? Th...
Hello guys, When you trigger patch install via CLI on the primary node in the cluster, and if installation is successful, will it be pushed to the secondary node automatically?I know that with GUI option it works as mentioned in the KB, but not too s...
Hello, Sorry if this has been asked or if l missed some basics.Is there a way to create TACACS authorization policy based on the specific username(s) with LDAP, not just based on the group? Thanks,myky
Hi folks, I must have missed something basics, but is it expected for ISE to validate username against its identity store for authorization requests? I always was thinking that once the user is authenticated, its group membership is retrieved during ...
Hello, Thanks for your reply, and I think I got it now. So basically, you will have to have shell access in the first place when authenticated, and for that to be allowed, you will have to have an explicit Authorization policy (which gets evaluated ...
ahh, blind me: % Warning: Patch will be installed only on this node. Install using Primary Administration node GUI to install on all nodes in deployment. Continue? (yes/no) [yes] ? yesThanks,myky
Hey, Thanks!Yes, there is a specific requirement to allow some users only (temporary) from the same LDAP group. Is there a way to add them manually? Thanks,myky
Thanks! I got the point of the identity store looks up sequence, but l was surprised to realise that authorization involves that.Apparently, it's expected behaviour. Thanks,Myky