pspete / psPAS

PowerShell module for CyberArk Privileged Access Security REST API
https://pspas.pspete.dev
MIT License
296 stars 91 forks source link

LDAP authentication not working in CyberArk 10.3 #71

Closed pspete closed 6 years ago

pspete commented 6 years ago

Your Environment

Expected Behaviour

When using LDAP credentials, authentication should work

Current Behaviour

When using LDAP credentials, authentication does not work

Possible Solution

Update URL from ..../WebServices/auth/Cyberark/CyberArkAuthenticationService.svc/Logon To ..../api/Auth/LDAP/Logon

Relates to #70 and requires a substantial update to the module

Steps to Reproduce (for bug reports)

1 . New-PASSession -Credential $LDAPCreds -BaseURI https://cyberark

Sample Output

Invoke-PASRestMethod : [403] Authentication failure.

Context

oliverolli commented 6 years ago

Hi We are experiencing this error. When can a workaround or solution be expected?

pspete commented 6 years ago

Hi @oliverolli - you are welcome to try the fix currently implemented in the psPAS Version 2 Branch. I still have a few more updates to make until merging into master - but the LDAP process auth will not change.

Note: there is a new parameter required at logon; specify "-type LDAP" when logging on with New-PASSession

oliverolli commented 6 years ago

Hi! adding -type LDAP in version 2.0 fixed the problem. Looking forward to the release of 2.0

pspete commented 6 years ago

Now merged into master branch