This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active Directory Users Auto-Generation - All OU's

I'm trying to get user synchronization working with Active Directory and Sophos Transparent Authentication Suite.

The Base DN for my authentication server is CN=users,DC=ad,DC=domain,DC=com and it works great except that it obviously won't find any of my users that are contained in OU's.

What base DN do I need to use in order to include all users, regardless of OU? (Or specify more than one OU in the Base DN.)

This thread was automatically locked due to age.

0 BAlfson over 8 years ago

Just use DC=ad,DC=domain,DC=com

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 AreshAreshi over 8 years ago

As Bob said you this way you only sync the users in the OU users, If you follow his suggestions then all of the users in the Root domain must get sync with your UTM.
Cancel
Vote Up 0 Vote Down

Cancel
0 tscott_16 over 8 years ago in reply to BAlfson

I tried this but it only syncs users in the built-in Users group. It doesn't sync anything in any of the OU's. Should the change to DC=ad,DC=domain,DC=com be immediate?
Cancel
Vote Up 0 Vote Down

Cancel
0 vilic over 8 years ago in reply to tscott_16

Hi,

Can you please post some screenshots of your configuration, it is unclear to me how STAS is related to your UTM AD sync problems.
Cancel
Vote Up 0 Vote Down

Cancel
0 tscott_16 over 8 years ago in reply to vilic

vilic said:

Hi,

Can you please post some screenshots of your configuration, it is unclear to me how STAS is related to your UTM AD sync problems.

I'm out today but will post pics as soon as I can. It's only related in as much as the users are not syncing and therefore STAS cannot authenticate those users.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago in reply to tscott_16

I've never tried to use anything but Backend Groups limited to manually-populated AD Security Groups. Where and how are you trying to sync users from AD? Please show pics of those configurations in the UTM, too.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 tscott_16 over 8 years ago

I came in this morning and everything is syncing properly. I have no idea why it wasn't working last week, but it's working as expected now. Maybe it just needed some time for everything to replicate/update.
Cancel
Vote Up 0 Vote Down

Cancel