Security

Hi all,

I'm not sure if what I'm trying to do is a valid design and need some assistance. We are building a secure environment and have a dedicated clear pass server that talks to this new secure.local domain. the domain/forest has a trust with user.local forest and we would like to have a group in secure.local with individual users from user.local. so far so good. 

we can authenticate with a user that is part of secure.local but not with any users that are from user.local in the same group.

I'm doing a GC query on port 3268 and can browse AD will this work?

Been a really long time since I've had to look at a multi-forest setup.

Double check the trust relationship is of the correct type.

What kind of authentications are you going to be using?

Something to look at:  https://community.arubanetworks.com/community-home/librarydocuments/viewdocument?DocumentKey=b0fb0082-e715-4014-8370-dbba08115aef&CommunityKey=3dd64143-3ac3-4152-9abd-06dc0b4ecdd1&tab=librarydocuments

Hi all,

I'm not sure if what I'm trying to do is a valid design and need some assistance. We are building a secure environment and have a dedicated clear pass server that talks to this new secure.local domain. the domain/forest has a trust with user.local forest and we would like to have a group in secure.local with individual users from user.local. so far so good. 

we can authenticate with a user that is part of secure.local but not with any users that are from user.local in the same group.

I'm doing a GC query on port 3268 and can browse AD will this work?

thanks, 

when you say correct trust relationship type. you mean eg: one way, transitive...etc? and Auth to LDAP is none at the moment while i try and get this working.

Been a really long time since I've had to look at a multi-forest setup.

Double check the trust relationship is of the correct type.

What kind of authentications are you going to be using?

Something to look at:  https://community.arubanetworks.com/community-home/librarydocuments/viewdocument?DocumentKey=b0fb0082-e715-4014-8370-dbba08115aef&CommunityKey=3dd64143-3ac3-4152-9abd-06dc0b4ecdd1&tab=librarydocuments

Hi all,

I'm not sure if what I'm trying to do is a valid design and need some assistance. We are building a secure environment and have a dedicated clear pass server that talks to this new secure.local domain. the domain/forest has a trust with user.local forest and we would like to have a group in secure.local with individual users from user.local. so far so good. 

we can authenticate with a user that is part of secure.local but not with any users that are from user.local in the same group.

I'm doing a GC query on port 3268 and can browse AD will this work?

Hi all,

I'm not sure if what I'm trying to do is a valid design and need some assistance. We are building a secure environment and have a dedicated clear pass server that talks to this new secure.local domain. the domain/forest has a trust with user.local forest and we would like to have a group in secure.local with individual users from user.local. so far so good. 

we can authenticate with a user that is part of secure.local but not with any users that are from user.local in the same group.

I'm doing a GC query on port 3268 and can browse AD will this work?