topic Re: Change source for LDAP phone info for DynamicID in SASE and Remote Access

Change source for LDAP phone info for DynamicID

Fran_Granados — Mon, 11 Jun 2018 16:00:27 GMT

Is it possible to change which LDAP attribute DynamicID uses when looking for mobile phone information?

I'd like to use "otherMobile" rather than "mobile". This is for R80.10

Thanks,

Re: Change source for LDAP phone info for DynamicID

ED — Mon, 11 Jun 2018 18:24:57 GMT

Hi,

Not tested this change but you can try in lab.

In GuiDBedit navigate to:

+Managed Objects -> ldap -> Microsoft_AD

In the lower pane, find the Field: PhoneNumberAttr

Double-click PhoneNumberAttr and change its value to: otherMobile

Click File -> Save all

Exit GuiDBedit, Open SmartDashboard, and install policy to your gateway

Just something else about dynamicID that might help you from CheckPoint support:

"According to R80.10 Mobile Access Admin Guide page 152, The default country code is added if the phone number stored on the LDAP server or on the local file on the gateway starts with 0.

In this case, the user's phone number doesn't start with 0 and therefore the country code wasn't added to it.

In order to the default country code to be added we must have a 0 in the first number of the phone." I hope someone from Check Point can answer why there has to be a 0 in front of the phonenumber? In my country phone numbers doesn't start with 0.

Re: Change source for LDAP phone info for DynamicID

PhoneBoy — Tue, 12 Jun 2018 14:48:45 GMT

Above is in the following SK: Configuring Two-Factor Authentication with DynamicID to send the OTP via email fails for Active Directory users

Re: Change source for LDAP phone info for DynamicID

Fran_Granados — Thu, 14 Jun 2018 15:22:49 GMT

Thanks Enis, I can confirm that this worked.

Re: Change source for LDAP phone info for DynamicID

George_Sas — Tue, 17 Nov 2020 12:16:34 GMT

Worked for me also and I used extensionAttribute5 as the others were in use for other systems.