topic Re: linux authetication and ADQuery in General Topics

linux authetication and ADQuery

abihsot__ — Fri, 30 Apr 2021 07:01:29 GMT

Hello,

Does anyone have such setup, where user authenticates to linux machine with AD credentials and identities are picked up by ADQuery?

Re: linux authetication and ADQuery

Mike_A — Fri, 30 Apr 2021 12:54:15 GMT

Logically this should work the same as a Windows machine. If your Linux machines are authenticating to AD, ADQ is a registered DCOM connection from the GW's participating in IA to your AD servers. It has nothing to do with linux. Via that DCOM connection AD will push all logins/logouts to your GW to compile the local database to match against the access role you would use in policy.

This should be explained further in sk60301

Re: linux authetication and ADQuery

abihsot__ — Fri, 30 Apr 2021 13:18:52 GMT

Yes, to me it sounded logical, however out of the box it didn't worked. I am not very good in this subject hence the question if anyone has it working.

My impression that linux would generate event with different ID, while ADQuery tracks only specific events

sk60501 - The necessary events are:

Windows 2003 servers: 672, 673, 674
Windows 2008 servers: 4624, 4768, 4769, 4770.
Windows 2012 servers: 4624*, 4768*, 4769*, 4770*