topic Re: AAA Non Proxy Authentication OpenLDAP in SmartZone and Virtual SmartZone

AAA Non Proxy Authentication OpenLDAP

Isai_Roa — Fri, 25 Aug 2023 21:11:06 GMT

Hello community.

I have created a non proxy auth connection in a VSZ HS version 6.1.0.0.935, and I want to apply in the search filter a filter that searches in several groups of the AD created in OpenLDAP.

I would like you to help me to find a filter that helps me in the authentication.

I have two groups for authentication and I need the two to be mixed in a single search filter, as I have no possibility to create a secondary LDAP profile for the same IP server.

The data for the LDAP profile is as follows

IP: X.X.X.X.X.
port: 389
Base DN: dc=XXXXX,dc=edu,dc=co
Admin DN: cn=admin,dc=XXXXXX,dc=edu,dc=co
Password: ********
Key attribute: uid
searh filter:tipoUsuario=*administrativo* (for the first search group)
searh filter:tipoUsuario=estudiante* (for the second search group)

Attached is an image of the structure in the OpenLDAP AD as a reference of the groups

When i aplly only one filter for the authentication in the profile AAA is correct, but when i apply other filter, it don't work or display error of occuped system.

I appreciate your help.

Re: AAA Non Proxy Authentication OpenLDAP

syamantakomer — Thu, 12 Oct 2023 18:47:01 GMT

@remya_murugesh, could you please help with this one.

Re: AAA Non Proxy Authentication OpenLDAP

remya_murugesh — Thu, 12 Oct 2023 20:48:44 GMT

Hi @Isai_Roa ,

Could you please share screenshots of the following:

Working LDAP config with the search-filter used in config
Non-working LDAP config with the search filter used in config
The error you received when not working
An LDAP group hierarchy screenshot with the mentioned "administrativo" and "estudiante" as they are not available in the screenshot shared