I'm in the middle of configuring a Juniper SRX to do LDAP Authentication for users and am running into an issue in my lab. I'm sure it's my own poor AD skills at play here, but I'm seeing some strange behaviour:
I'm trying to permit any user within the group CN=german_users
. Two users are assigned to it, however their path in ADSI edit does not reflect that:
CN=german_user_1,OU=Germany,OU=Europe...
Should it not be CN=german_user_1,CN=german_users,OU=Germany,OU=Europe...
?
I'm having difficulty referencing the specific group on the SRX. If I could figure out the absolute path to the user, I'm sure this would be simple.
How do I:
a) Validate their path
and/or
b) Modify the path of the user to be included within the group?
Thanks!
Edit: I should note that I cannot simply use any account within the 'OU'. I need to use specific groups within the same OU to allocate different access.