topic RE: Netsight LDAP Authentication of Groupmembers in ExtremeCloud IQ- Site Engine Management Center

Netsight LDAP Authentication of Groupmembers

PeterK — Fri, 20 May 2016 17:43:00 GMT

Hello, I'm currently changing my Netsight-Authentication from OS to LDAP (MS Active Directory). I've 2 groups in AD. 1 for admins and 1 for operators. Is there a way to configure that all groupmembers have access to netsight with definded AuthorizationGroups in Netsight? I'm currently a bit confusing about situation.

RE: Netsight LDAP Authentication of Groupmembers

Ronald_Dvorak — Fri, 20 May 2016 18:04:00 GMT

Here a link to the solution...
https://gtacknowledge.extremenetworks.com/articles/How_To/How-To-Match-NAC-LDAP-Lookup-To-Active-Dir...

RE: Netsight LDAP Authentication of Groupmembers

PeterK — Fri, 20 May 2016 18:11:00 GMT

Hi Ron, thanks for your reply, but it doesn't really help... because it shows NAC and not Netsight...But it helps thinking... "Membership Criteria" seems to be the field I need in Auth-Group configuration

RE: Netsight LDAP Authentication of Groupmembers

Mike_Thomas — Fri, 20 May 2016 18:13:00 GMT

Also see the following. I believe you will need the user setup in both parts, to get the 'separation' into different groups from Netsights point of view.

RE: Netsight LDAP Authentication of Groupmembers

PeterK — Fri, 20 May 2016 18:16:00 GMT

@Mike That meens, that I need to create user in "authorized Users" Tab in Netsight? Or is this only nessecary for local users?

RE: Netsight LDAP Authentication of Groupmembers

Mike_Thomas — Fri, 20 May 2016 18:39:00 GMT

No, it's needed for LDAP as well. We don't expect users to want anyone within an LDAP group to get access.

RE: Netsight LDAP Authentication of Groupmembers

PeterK — Fri, 23 Jun 2017 11:07:00 GMT

and still it works...
You do not need to create users in netsight...they will automatically added, if they are groupmembers in LDAP...

RE: Netsight LDAP Authentication of Groupmembers

Gabriel_Bagita — Fri, 23 Jun 2017 11:07:00 GMT

I've had the same problem but solved it. The correct membership criteria of the Authorization Group should be memberOf="DN of the AD Group". IMHO the instruction in the help is not very correct.

RE: Netsight LDAP Authentication of Groupmembers

PeterK — Wed, 25 Apr 2018 17:36:00 GMT

This function is not implemented very well...
I've a lot LDAP setups at customers but sometimes the automatic groubmembership is not working, but I don't understand why.... When I add user to ldap group in netsight, it works... but this is not the function I will have.

Some Ideas, why this wouldn't work every time?