Overview:

 

The Lightweight Directory Access Protocol (LDAP) is an industry standard protocol for maintaining and accessing directory information over a network. LDAP Authentication allows you to bind the device to an LDAP server and use that server to authenticate LAN clients. This post introduces how to configure LDAP Profiles for Windows AD.

 

This Article applies to:

 

Omada SDN Controllers v5.14.30 and above.

 

 

Configuration Steps:

 

1. Choose Site view, go to Settings > Network Profile > LDAP Profile, click Create New LDAP Profile:

 

 

2. Choose the Bind Type as Regular Mode:

 

3. Regular DN should be configured as the user DN with AD administrator privileges, and the Regular Password should be the corresponding password. For example:

 

 

4. Fill in other required fields as your need.

 

5. Click the search button next to Base Distinguished Name to match the Base DN. 

 

You may encounter the following issue during this step: If the Windows AD has multiple Base Distinguished Names, it will default to using the first Base DN, which may cause subsequent search matches to fail. In this case, you need to manually adjust the Base Distinguished Name to an entry that can be used for searching. A screenshot with example will be provided later.

 

Under this situation, directly searching will match the Base DN as shown in the image:

 

 

Applying this DN and continuing the search will result in the following error：

 

 

You need to manually adjust it to a Base DN that can be used for searching to continue：

 

 

 

Note:

Currently, we only support certain Windows AD. 

 

 

Recommended Threads:

 

How to Configure MAC-Based Authentication on Omada SDN Controller with the Built-in RADIUS Server?

How to Configure Dynamic VLAN with the Built-in RADIUS Server of Omada SDN Controller via User Auth?

 

Feedback:

 

• If this was helpful, welcome to give us Kudos by clicking the upward triangle below.
• If there is anything unclear in this solution post, please feel free to comment below.

 

Thank you in advance for your valuable feedback!

 

------------------------------------------------------------------------------------------------

Have other off-topic issues to report? 

Welcome to > Start a New Thread < and elaborate on the issue for assistance.