[Freeipa-users] qradar UBA to IPA

[Sean Hogan]

Hello IPA,

  I am trying to set up User Behavioral analytics from Qradar to IPA.
Having some issues with it after we got 389 and 636 open between the nets.

Qradar Console is not in IPA and on differ net although we do have comms on
389 and 636 now
ipa-server-3.0.0-50.el6.1.x86_64


I set up an account in IPA with no HBACS or anything and just gave it a IPA
role to read data which we use in the below config.
Getting
file:///home/schogan/Documents/SametimeTranscripts/[multi-way]/20170508-100730%7BJUSTIN%20L.%20BAUMAN's%20group%20chat%7D/IMAGE
$1CFC0CDDB6F2F123.jpg

URL I have them using ldaps://IPofIPAserver.example.com
BaseDN  dc=example,dc=local
filter users,cn=accounts,$Suffix
attributes are left default
username is the user i made in ipa
pw is the pw I made in ipa


file:///home/schogan/Documents/SametimeTranscripts/[multi-way]/20170508-100730%7BJUSTIN%20L.%20BAUMAN's%20group%20chat%7D/IMAGE
$1B778A1810D34E76.jpg

Has anyone attempted this or have any sample configs to play with or see
anything I am doing incorrect?




Sean Hogan





-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170508/d4e5214b/attachment.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 15904322.jpg
Type: image/jpeg
Size: 2728 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170508/d4e5214b/attachment.jpg>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 15172410.jpg
Type: image/jpeg
Size: 16331 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-users/attachments/20170508/d4e5214b/attachment-0001.jpg>