Going through this presentation, I have gotten to the cert import. It took many hours of troubleshooting and testing to finally realize that, because of something in the filenames, the certs would not import. Error "file not found" was thrown at every attempt to import. Out of frustration, I restarted the process from scratch and named all certs (DC and CA) in lowercase letters with no numbers or special characters and they imported just fine. Thought I'd leave this here in case anyone else runs into the same issue. This is with Zerto 10.0 Update 1.
Hi, Great video. Have you tested the LDAP filtering for the group mapper. Seems straightforward but I can't get it to work. It simply says to use (|(cn=GroupA) (cn=GroupB)), but that doesn't work. I tried with and without the "|".
I used this, of which Zertoadmins was the only group within the OU that I wanted to have access. (&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=Zertoadmins,OU=Admin Groups and Accounts,DC=somecompany,DC=com))
Going through this presentation, I have gotten to the cert import. It took many hours of troubleshooting and testing to finally realize that, because of something in the filenames, the certs would not import. Error "file not found" was thrown at every attempt to import. Out of frustration, I restarted the process from scratch and named all certs (DC and CA) in lowercase letters with no numbers or special characters and they imported just fine. Thought I'd leave this here in case anyone else runs into the same issue.
This is with Zerto 10.0 Update 1.
Hi, Great video. Have you tested the LDAP filtering for the group mapper. Seems straightforward but I can't get it to work. It simply says to use (|(cn=GroupA) (cn=GroupB)), but that doesn't work. I tried with and without the "|".
I used this, of which Zertoadmins was the only group within the OU that I wanted to have access. (&(objectCategory=Person)(sAMAccountName=*)(memberOf=CN=Zertoadmins,OU=Admin Groups and Accounts,DC=somecompany,DC=com))
So once you enable ldap auth, you can't use the local users anymore? There's no breakglass account in the even that ldap/ad has an issue?