This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos connection with LDAP

Good afternoon,

I am having trouble synchronizing the sophos with the openldap server. To configure the ldap I am using the phpldapadmin application. When creating a user, I cannot find the mandatory attribute "Expiration Date Attribute" that Sophos asks me to join the ldap. This shows me the following error "the test connection failed due to an incorrect credential".

Does anyone know where I can find this attribute? How can I add it to the user?

Thank you very much.

Cheers

This thread was automatically locked due to age.

0 FormerMember over 4 years ago

Hi Jhonatan Rivero,

Could you please check if you have followed the steps outlined in this KB Article : Sophos XG Firewall: How to integrate with LDAP Server.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

0 Jhonatan Rivero over 4 years ago in reply to FormerMember

Hi H_Patel,

thanks for your answer. Yes, I have followed the steps in the manual but what fails me (I think) is the "Expiration Date Attribute" field since in my linux-based openldap I don't have that "date" attribute. And I think that if the attributes are not exactly the ones that have to be the connection fails. The rest I am sure is correct, ldap ip (I have ping), domain, user, password ... etc

a greeting

0 FormerMember over 4 years ago in reply to Jhonatan Rivero

Hi Jhonatan Rivero,

I do not think openldap supports Expiry date attribute. I have gone through their forms and it seems it is not supported on openldap. Have you tried to leave it as just Date on the XG firewall?

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
+1 KingChris over 4 years ago

Hi Jhonatan Rivero

There is currently a bug affecting the XG with LDAP authentication. We have a patch that can be applied. Alternatively you can wait until v17.5MR10 which should be out during the course of this month.

If you wish to have the patch installed, please open a support case.

Thanks!

KingChris
Community Support | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel