Changin ldap-naming-attribute on firepower FDM

[aaltamirano]

Hi,

How can I change the ldap-naming-attribute on an FTD device?

We try to login on an ldap server, but the device is using cn attribute instead of uid. On ASA we can use ldap-naming-attribute, but on FTD there is no way on the gui nor the api.

[Alan Inman]

Are you managing the FTD via an FMC or FDM? If FMD check out this YouTube starting at 4:00 minute marker

[aaltamirano]

Thanks Alan,

I'm using FDM. I saw that video but its intended to create ldap attribute mapping not for changing filtering for a aaa-server (identity source). With ldap mapping you can change only attributes from a very specific list where ldap-naming-attribute or CN are not included. Actually, ldap-mapping gets in play when you are already authentified.