{"id":322,"date":"2015-09-20T11:53:07","date_gmt":"2015-09-20T11:53:07","guid":{"rendered":"http:\/\/www.safekom.pl\/blog\/?p=322"},"modified":"2015-09-20T15:24:25","modified_gmt":"2015-09-20T15:24:25","slug":"palo-ad-2012-user-maping","status":"publish","type":"post","link":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/","title":{"rendered":"Palo – AD 2012 user maping"},"content":{"rendered":"

Poni\u017cej opis jak pod\u0142\u0105czy\u0107 Palo do AD 2012 w celu pozyskania u\u017cytkownik\u00f3w do Autoryzacji SSH, WEB GUI.<\/p>\n

Kontroler domeny windows 2012r poziom AD 2012<\/p>\n

AD01- 192.168.1.199<\/p>\n

User-\u00a0pa-admin-user<\/p>\n

domena- safekom.pl<\/p>\n

Konfiguracja Palo:<\/p>\n

Device –> Server Profiles –> LDAP<\/p>\n

\"ldap01\"<\/a><\/p>\n

Gdzie w servers podajemy namiary na kontrolery domeny, w mym przypadku jest to jeden serwer. Na chwil\u0119 obecn\u0105 korzystam z LDAP bez SSL. W polu Domain wpisujemy nazw\u0119 NETBIOS\u00a0\u00a0domeny, w kolejnym polu wybieramy Active-Directory. W polu Base podajemy w formacie LDAP (X.500) czyli DC=safekom, dc=pl, w polu Bind DN podajemy usera kt\u00f3ry mo\u017ce czyta\u0107 drzewo LDAP, w dokumentacji jest aby pole podawa\u0107 w formacie X.500 a zastosowa\u0142em user@domena.pl, pole Bind Password – has\u0142o do u\u017cytkownika.<\/p>\n

to co wy\u017cej ale z CLI:<\/p>\n

set shared server-profile ldap AD-Safekom server ad01 address 192.168.1.199\r\nset shared server-profile ldap AD-Safekom server ad01 port 389\r\nset shared server-profile ldap AD-Safekom ldap-type active-directory\r\nset shared server-profile ldap AD-Safekom bind-dn pa-admin-user@safekom.pl\r\nset shared server-profile ldap AD-Safekom bind-password Password_DLA_Usera-pa-admin-user\r\nset shared server-profile ldap AD-Safekom base \"dc=safekom, dc=pl\"\r\nset shared server-profile ldap AD-Safekom ssl no\r\nset shared server-profile ldap AD-Safekom domain safekom<\/pre>\n
 <\/p>\n
Kolejnym krokiem jest wybranie grup w AD kt\u00f3re b\u0119d\u0105 przeszukiwane. Przechodzimy do Device–>User Identification –> Group Mapping Settings, dodajemy nowy profil:<\/p>\n
\"ldap02\"<\/a><\/p>\n
Gdzie:<\/p>\n
Name – dowolna nazwa profilu<\/p>\n
Server profile – wybieramy profil kt\u00f3ry utworzyli\u015bmy dla serwera LDAP<\/p>\n
przechodzimy do zak\u0142adki Group Include List gdzie wybieramy grupy AD kt\u00f3re maj\u0105 by\u0107 przeszukiwane.<\/p>\n
\"ldap03\"<\/a><\/p>\n
To co wy\u017cej ale z CLI:<\/p>\n
set group-mapping safekom group-object group\r\nset group-mapping safekom group-name name\r\nset group-mapping safekom group-member member\r\nset group-mapping safekom user-object person\r\nset group-mapping safekom user-name sAMAccountName\r\nset group-mapping safekom email mail\r\nset group-mapping safekom server-profile AD-Safekom\r\nset group-mapping safekom update-interval 60\r\nset group-mapping safekom group-include-list \"cn=domain users,cn=users,dc=safekom, dc=pl\"<\/pre>\n
Tworzymy u\u017cytkownika kt\u00f3ry mo\u017ce zalogowa\u0107 si\u0119 po SSH oraz WEB GUI<\/p>\n
Pierwszym krokiem b\u0119dzie utworzenie profilu\u00a0Authentication Profile.<\/p>\n
\"ldap04\"<\/a><\/p>\n
Gdzie:<\/p>\n
Name – to dowolna nasza nazwa<\/p>\n
w polu Allow List wybieramy grup\u0119 z AD kt\u00f3ra ma by\u0107 sprawdzana autoryzacj\u0119 u\u017cytkownika.<\/p>\n
Authentication – wybieramy LDAP<\/p>\n
Server Profile – Nasz profil<\/p>\n
Login Attribute – wpisujemy\u00a0sAMAccountName (jest to nazwa pola user w AD)<\/p>\n
To co wy\u017cej ale z CLI:<\/p>\n
set shared authentication-profile AD method ldap server-profile AD-Safekom\r\nset shared authentication-profile AD method ldap login-attribute sAMAccountName\r\nset shared authentication-profile AD allow-list cn=users,cn=builtin,dc=safekom,dc=pl<\/pre>\n
Przechodzimy do\u00a0Administrators gdzie mapujemy u\u017cytkowania.<\/p>\n
\"ldap05\"<\/a><\/p>\n
gdzie:<\/p>\n
Name: u\u017cytkownik z AD<\/p>\n
Roule: Dynamic – Superuser<\/p>\n
To co wy\u017cej ale z CLI:<\/p>\n
set mgt-config users miwanczuk permissions role-based superuser yes\r\nset mgt-config users miwanczuk authentication-profile AD<\/pre>\n
 <\/p>\n
Kolejnym krokiem b\u0119dzie pozyskanie IP u\u017cytkownik\u00f3w ale to b\u0119dzie w kolejnym wpisie na blogu<\/p>\n","protected":false},"excerpt":{"rendered":"
Poni\u017cej opis jak pod\u0142\u0105czy\u0107 Palo do AD 2012 w celu pozyskania u\u017cytkownik\u00f3w do Autoryzacji SSH, WEB GUI. Kontroler domeny windows 2012r poziom AD 2012 AD01- 192.168.1.199 User-\u00a0pa-admin-user domena- safekom.pl Konfiguracja Palo: Device –> Server Profiles –> LDAP Gdzie w servers podajemy namiary na kontrolery domeny, w mym przypadku jest to jeden serwer. Na chwil\u0119 obecn\u0105 […]<\/p>\n","protected":false},"author":1,"featured_media":304,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[84,78],"tags":[88,89,79,81,80,86],"class_list":["post-322","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lab","category-palo-alto","tag-ad","tag-maping","tag-palo","tag-palo-alto-networks","tag-paloalto","tag-user"],"yoast_head":"\nPalo - AD 2012 user maping - SafeKom Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/\" \/>\n<meta property=\"og:locale\" content=\"pl_PL\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Palo - AD 2012 user maping - SafeKom Blog\" \/>\n<meta property=\"og:description\" content=\"Poni\u017cej opis jak pod\u0142\u0105czy\u0107 Palo do AD 2012 w celu pozyskania u\u017cytkownik\u00f3w do Autoryzacji SSH, WEB GUI. Kontroler domeny windows 2012r poziom AD 2012 AD01- 192.168.1.199 User-\u00a0pa-admin-user domena- safekom.pl Konfiguracja Palo: Device –> Server Profiles –> LDAP Gdzie w servers podajemy namiary na kontrolery domeny, w mym przypadku jest to jeden serwer. Na chwil\u0119 obecn\u0105 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/\" \/>\n<meta property=\"og:site_name\" content=\"SafeKom Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/safekompl\" \/>\n<meta property=\"article:published_time\" content=\"2015-09-20T11:53:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2015-09-20T15:24:25+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1\" \/>\n\t<meta property=\"og:image:width\" content=\"566\" \/>\n\t<meta property=\"og:image:height\" content=\"680\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Micha\u0142 Iwa\u0144czuk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MIwaczuk\" \/>\n<meta name=\"twitter:site\" content=\"@MIwaczuk\" \/>\n<meta name=\"twitter:label1\" content=\"Napisane przez\" \/>\n\t<meta name=\"twitter:data1\" content=\"Micha\u0142 Iwa\u0144czuk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Szacowany czas czytania\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/\"},\"author\":{\"name\":\"Micha\u0142 Iwa\u0144czuk\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/person\\\/fd4cc931b624af4b7353d36d92ba7181\"},\"headline\":\"Palo – AD 2012 user maping\",\"datePublished\":\"2015-09-20T11:53:07+00:00\",\"dateModified\":\"2015-09-20T15:24:25+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/\"},\"wordCount\":324,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"keywords\":[\"ad\",\"maping\",\"Palo\",\"Palo Alto Networks\",\"PaloAlto\",\"user\"],\"articleSection\":[\"Lab\",\"Palo Alto\"],\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/\",\"name\":\"Palo - AD 2012 user maping - SafeKom Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"datePublished\":\"2015-09-20T11:53:07+00:00\",\"dateModified\":\"2015-09-20T15:24:25+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#breadcrumb\"},\"inLanguage\":\"pl-PL\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#primaryimage\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/08\\\/Paloalto_logo.png?fit=566%2C680&ssl=1\",\"width\":566,\"height\":680},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/palo-alto\\\/palo-ad-2012-user-maping\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Palo – AD 2012 user maping\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\",\"name\":\"SafeKom Blog\",\"description\":\"Notatki Architekta i in\u017cyniera zwi\u0105zanego rozwi\u0105zaniami on-prem\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"pl-PL\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#organization\",\"name\":\"SafeKom Blog\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/cropped-logo.png?fit=512%2C512&ssl=1\",\"contentUrl\":\"https:\\\/\\\/i0.wp.com\\\/www.safekom.pl\\\/blog\\\/wp-content\\\/uploads\\\/2015\\\/05\\\/cropped-logo.png?fit=512%2C512&ssl=1\",\"width\":512,\"height\":512,\"caption\":\"SafeKom Blog\"},\"image\":{\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/safekompl\",\"https:\\\/\\\/x.com\\\/MIwaczuk\",\"https:\\\/\\\/www.linkedin.com\\\/in\\\/michaliwanczuk\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/#\\\/schema\\\/person\\\/fd4cc931b624af4b7353d36d92ba7181\",\"name\":\"Micha\u0142 Iwa\u0144czuk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"pl-PL\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g\",\"caption\":\"Micha\u0142 Iwa\u0144czuk\"},\"description\":\"Pasjonat komputerowy od zawsze oraz maniak w zakresie sieci, wirtualizacji oraz bezpiecze\u0144stwa IT. Kompetentny in\u017cynier z du\u017cym do\u015bwiadczeniem w realizacji projekt\u00f3w informatycznych i telekomunikacyjnych. Wieloletni administrator IT, kt\u00f3ry utrzymuje systemy informatyczne dostosowuj\u0105c je do wymog\u00f3w biznesowych z zapewnieniem dost\u0119pno\u015bci 24\\\/7\\\/365.\",\"url\":\"https:\\\/\\\/www.safekom.pl\\\/blog\\\/author\\\/admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Palo - AD 2012 user maping - SafeKom Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/","og_locale":"pl_PL","og_type":"article","og_title":"Palo - AD 2012 user maping - SafeKom Blog","og_description":"Poni\u017cej opis jak pod\u0142\u0105czy\u0107 Palo do AD 2012 w celu pozyskania u\u017cytkownik\u00f3w do Autoryzacji SSH, WEB GUI. Kontroler domeny windows 2012r poziom AD 2012 AD01- 192.168.1.199 User-\u00a0pa-admin-user domena- safekom.pl Konfiguracja Palo: Device –> Server Profiles –> LDAP Gdzie w servers podajemy namiary na kontrolery domeny, w mym przypadku jest to jeden serwer. Na chwil\u0119 obecn\u0105 […]","og_url":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/","og_site_name":"SafeKom Blog","article_publisher":"https:\/\/www.facebook.com\/safekompl","article_published_time":"2015-09-20T11:53:07+00:00","article_modified_time":"2015-09-20T15:24:25+00:00","og_image":[{"width":566,"height":680,"url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","type":"image\/png"}],"author":"Micha\u0142 Iwa\u0144czuk","twitter_card":"summary_large_image","twitter_creator":"@MIwaczuk","twitter_site":"@MIwaczuk","twitter_misc":{"Napisane przez":"Micha\u0142 Iwa\u0144czuk","Szacowany czas czytania":"2 minuty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#article","isPartOf":{"@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/"},"author":{"name":"Micha\u0142 Iwa\u0144czuk","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/person\/fd4cc931b624af4b7353d36d92ba7181"},"headline":"Palo – AD 2012 user maping","datePublished":"2015-09-20T11:53:07+00:00","dateModified":"2015-09-20T15:24:25+00:00","mainEntityOfPage":{"@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/"},"wordCount":324,"commentCount":0,"publisher":{"@id":"https:\/\/www.safekom.pl\/blog\/#organization"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","keywords":["ad","maping","Palo","Palo Alto Networks","PaloAlto","user"],"articleSection":["Lab","Palo Alto"],"inLanguage":"pl-PL","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/","url":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/","name":"Palo - AD 2012 user maping - SafeKom Blog","isPartOf":{"@id":"https:\/\/www.safekom.pl\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#primaryimage"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#primaryimage"},"thumbnailUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","datePublished":"2015-09-20T11:53:07+00:00","dateModified":"2015-09-20T15:24:25+00:00","breadcrumb":{"@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#breadcrumb"},"inLanguage":"pl-PL","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/"]}]},{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#primaryimage","url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","width":566,"height":680},{"@type":"BreadcrumbList","@id":"https:\/\/www.safekom.pl\/blog\/palo-alto\/palo-ad-2012-user-maping\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/www.safekom.pl\/blog\/"},{"@type":"ListItem","position":2,"name":"Palo – AD 2012 user maping"}]},{"@type":"WebSite","@id":"https:\/\/www.safekom.pl\/blog\/#website","url":"https:\/\/www.safekom.pl\/blog\/","name":"SafeKom Blog","description":"Notatki Architekta i in\u017cyniera zwi\u0105zanego rozwi\u0105zaniami on-prem","publisher":{"@id":"https:\/\/www.safekom.pl\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.safekom.pl\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"pl-PL"},{"@type":"Organization","@id":"https:\/\/www.safekom.pl\/blog\/#organization","name":"SafeKom Blog","url":"https:\/\/www.safekom.pl\/blog\/","logo":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/05\/cropped-logo.png?fit=512%2C512&ssl=1","contentUrl":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/05\/cropped-logo.png?fit=512%2C512&ssl=1","width":512,"height":512,"caption":"SafeKom Blog"},"image":{"@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/safekompl","https:\/\/x.com\/MIwaczuk","https:\/\/www.linkedin.com\/in\/michaliwanczuk\/"]},{"@type":"Person","@id":"https:\/\/www.safekom.pl\/blog\/#\/schema\/person\/fd4cc931b624af4b7353d36d92ba7181","name":"Micha\u0142 Iwa\u0144czuk","image":{"@type":"ImageObject","inLanguage":"pl-PL","@id":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cc6dda4ee8d21d1f254147e5ee6f5e38881b88a4a12a5774ca42380597e52014?s=96&d=mm&r=g","caption":"Micha\u0142 Iwa\u0144czuk"},"description":"Pasjonat komputerowy od zawsze oraz maniak w zakresie sieci, wirtualizacji oraz bezpiecze\u0144stwa IT. Kompetentny in\u017cynier z du\u017cym do\u015bwiadczeniem w realizacji projekt\u00f3w informatycznych i telekomunikacyjnych. Wieloletni administrator IT, kt\u00f3ry utrzymuje systemy informatyczne dostosowuj\u0105c je do wymog\u00f3w biznesowych z zapewnieniem dost\u0119pno\u015bci 24\/7\/365.","url":"https:\/\/www.safekom.pl\/blog\/author\/admin\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1","jetpack_shortlink":"https:\/\/wp.me\/p7i9ri-5c","jetpack-related-posts":[{"id":2058,"url":"https:\/\/www.safekom.pl\/blog\/vmware\/vmware-vrealize-network-insight-pierwsze-uruchomienie\/","url_meta":{"origin":322,"position":0},"title":"VMware vRealize Network Insight – Pierwsze uruchomienie","author":"Micha\u0142 Iwa\u0144czuk","date":"15.11.2017","format":false,"excerpt":"W poprzednim wpisie - w kt\u00f3rym pokaza\u0142em jak zainstalowa\u0107 rozwi\u0105zanie\u00a0VMware vRealize Network Insight. Dzi\u015b skupi\u0119 si\u0119 jak wykona\u0107 pierwsze uruchomienie poprzez integracj\u0119 z: vCenter NSX LDAP (AD) Syslog \u00a0 vCenter Zaraz po pierwszym zalogowaniu dodajemy pierwsze \u017ar\u00f3d\u0142o danych do analizy, kt\u00f3rym jest vCenter. Po klikni\u0119ciu na ikon\u0119 wy\u017cej dostajemy okno\u2026","rel":"","context":"W \u201eVmware"","block_context":{"text":"Vmware","link":"https:\/\/www.safekom.pl\/blog\/category\/vmware\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo.jpg?fit=648%2C429&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo.jpg?fit=648%2C429&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo.jpg?fit=648%2C429&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":494,"url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-cisco-ise-join-ad-cz-2\/","url_meta":{"origin":322,"position":1},"title":"LAB – Cisco ISE join AD cz.2","author":"Micha\u0142 Iwa\u0144czuk","date":"02.02.2016","format":false,"excerpt":"W tej cz\u0119\u015bci opisz\u0119 jak ISE pod\u0142\u0105czy\u0107 do Active Directory: Dane domeny: Domena safekom.pl Kontroler Domeny AD01.safekom.pl Logujemy si\u0119 do ISE: przechodzimy do Administration -->\u00a0External Identity Sources wybieramy Active Directory po lewej stronie: Klikamy add w polu Join Point Name - musimy da\u0107 inn\u0105 nazw\u0119 ni\u017c nazwa naszego serwera ISE\u2026","rel":"","context":"W \u201eCisco"","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/09\/cisco-logo.png?fit=400%2C300&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":975,"url":"https:\/\/www.safekom.pl\/blog\/vmware\/home-lab-vcenter-integracja-z-ad\/","url_meta":{"origin":322,"position":2},"title":"Home Lab – vCenter integracja z AD","author":"Micha\u0142 Iwa\u0144czuk","date":"26.06.2016","format":false,"excerpt":"Wcze\u015bniej pokaza\u0142em jak zainstalowa\u0107 vCenter. Teraz przysz\u0142a pora na integracj\u0119 naszego vCenter z Active Directory. Po stronie AD utworzymy grup\u0119 lub grupy kt\u00f3re b\u0119dziemy przypisywa\u0107 do zarz\u0105dzania vCenter. Ja utworzy\u0142em grup\u0119 vmware-admin, kt\u00f3ra b\u0119dzie mia\u0142a uprawnienia Administratora. Wa\u017cnym elementem integracji z AD jest to aby nie by\u0142o rozjazdu czasu\u00a0pomi\u0119dzy serwerami\u2026","rel":"","context":"W \u201eLab"","block_context":{"text":"Lab","link":"https:\/\/www.safekom.pl\/blog\/en\/category\/lab\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo-1.jpg?fit=648%2C429&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo-1.jpg?fit=648%2C429&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo-1.jpg?fit=648%2C429&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":944,"url":"https:\/\/www.safekom.pl\/blog\/vmware\/home-lab-vcenter-instalacja\/","url_meta":{"origin":322,"position":3},"title":"Home Lab – vCenter instalacja","author":"Micha\u0142 Iwa\u0144czuk","date":"21.06.2016","format":false,"excerpt":"W poprzednich dw\u00f3ch wpisach mamy ju\u017c przygotowane koncepcje \u015brodowiska oraz przygotowan\u0105 sie\u0107. Dzi\u015b przyszed\u0142 czas na instalacj\u0119 vCenter w wersji appliance\u00a0. Poni\u017cej,\u00a0dla tych co b\u0119d\u0105 to robi\u0107 pierwszy raz, \u00a0przedstawiam jak to wygl\u0105da: B\u0119d\u0105 nam potrzebne: - plik iso z vCenter VCSA - najwygodniej stacja z Windowsem z uprawnieniami Admina\u2026","rel":"","context":"W \u201eLab"","block_context":{"text":"Lab","link":"https:\/\/www.safekom.pl\/blog\/en\/category\/lab\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo-1.jpg?fit=648%2C429&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo-1.jpg?fit=648%2C429&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2016\/06\/vmware_cloud_logo-1.jpg?fit=648%2C429&ssl=1&resize=525%2C300 1.5x"},"classes":[]},{"id":2540,"url":"https:\/\/www.safekom.pl\/blog\/fortinet\/fortimanager\/integracja-fortimanager-z-ad\/","url_meta":{"origin":322,"position":4},"title":"Fortimanager integracja z LDAP","author":"Micha\u0142 Iwa\u0144czuk","date":"19.03.2020","format":false,"excerpt":"Dzi\u015b opisz\u0119 konfiguracj\u0119 Fortimanager a dok\u0142adnie integracj\u0119 z LDAP'em w celu autoryzacji administrator\u00f3w. Naszym serwerem LDAP b\u0119dzie Active Directory kt\u00f3re posiadam w labie. Sama konfiguracja zostanie wykonana z poziomu GUI ale na ko\u0144cu znajdziecie wynik konfiguracji z CLI. Za\u0142o\u017cenia dane potrzebne do konfiguracji: Dane Warto\u015b\u0107 nazwa safekom.pl Server Name\/IP 10.10.0.111\u2026","rel":"","context":"W \u201eFortiManager"","block_context":{"text":"FortiManager","link":"https:\/\/www.safekom.pl\/blog\/category\/fortinet\/fortimanager\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2020\/03\/3Metas-Fortinet-Logo.png?fit=387%2C327&ssl=1&resize=350%2C200","width":350,"height":200},"classes":[]},{"id":840,"url":"https:\/\/www.safekom.pl\/blog\/cisco\/lab-ise-jako-radius-dla-paloalto-dla-kont-admina\/","url_meta":{"origin":322,"position":5},"title":"LAB – ISE jako radius dla PaloAlto dla kont Admina","author":"Micha\u0142 Iwa\u0144czuk","date":"10.05.2016","format":false,"excerpt":"Po d\u0142u\u017cszej przerwie wr\u00f3ci\u0142em do integracji Cisco ISE 2.0 z Palo Alto Networks wykorzystuj\u0105c Radiusa z ISE jako punkt uwierzytelniania kont administracyjnych. Wiem, \u017ce zapewne wi\u0119kszo\u015b\u0107 autoryzacji kont administracyjnych opiera si\u0119 o LDAP oraz AD. Natomiast ja jak zawsz\u0119 musz\u0119 kombinowa\u0107 i komplikowa\u0107 scenariusze do labowania, ale dzi\u0119ki takiemu podej\u015bciu\u2026","rel":"","context":"W \u201eCisco"","block_context":{"text":"Cisco","link":"https:\/\/www.safekom.pl\/blog\/category\/cisco\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=350%2C200 1x, https:\/\/i0.wp.com\/www.safekom.pl\/blog\/wp-content\/uploads\/2015\/08\/Paloalto_logo.png?fit=566%2C680&ssl=1&resize=525%2C300 1.5x"},"classes":[]}],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts\/322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/comments?post=322"}],"version-history":[{"count":0,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/posts\/322\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/media\/304"}],"wp:attachment":[{"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/media?parent=322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/categories?post=322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.safekom.pl\/blog\/wp-json\/wp\/v2\/tags?post=322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}