Topics

1

Spanish - Español / Conectar con active directory LDAP

« on: January 17, 2017, 08:51:23 pm »

Saludos,

Instalé OPNSENSE con la intención de utilizar filtros web para un grupo de usuarios de un dominio del cual soy administrador. este dominio esta en windows server 2012, tiene su active directory, todo configurado con sus grupos y respectivos permisos.

el problema es que no he logrado conectar el servidor LDAP al opnsense, tengo acceso a internet ya configurado, solo falta eso... el firewall del opnsense tiene la regla para permitir las coneziones LDAP, por ahí no hay problema.

cuando intento agregar el servidor, luego de introducir los valores host, bind credentials (con el usuario adminsitrador de dominio) y colocar base DN, al dar select me da el error Could not connect to the LDAP server. Please check your LDAP configuration.

no sé si tenga que configurar algo adicional en el windows server(?)

por favor si alguien tiene alguna sugerencia, lo apreciaría mucho. puedo dar más detalles, si los necesitan no duden en preguntar...

gracias.

2

Tutorials and FAQs / Replace ISA server with OPNSense

« on: January 04, 2017, 09:52:41 pm »

Greetings and happy new year to you all.

I just entered to a company in which there's a domain host and an active directory set of users working, the rules for acceding the internet are controlled by an ISA server which depending on the user, gives permissions to web browse or not...( this ISA is microsoft 2006). as you all know, now-a-days ISA server is not a good tool for this functions(reason of me entering the company)... so I wanted to try the OPNSense to do this function.

They have windows server 2012.

So before getting in troubles for damaging something, I made a small testing lab in my office and I installed the latest version of OPNSense on a computer that I assembled with two network cards, I have enabled the internet access already. I used one card for wan, and another for lan.

Now I think the next step will be to enable the LDAP. all I've done is by following your docs, and here's the problem, after setting the firewall rule for letting the ldap pass, I went to the access, and Add server option, but after writing the DC=domainname,DC=com I click select but it always shows...

Could not connect to the LDAP server. Please check your LDAP configuration.

so i checked if the opnsense could see the windows server on the network, and yes they ping each other, no problem with that.

therefore I'm here to ask you if is there something I have to install on windows server, or something I'm missing... thank you guys, if you need more information, please ask and I will provide it.