{"id":95330,"date":"2020-09-28T07:42:51","date_gmt":"2020-09-28T05:42:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2"},"modified":"2020-09-28T07:42:51","modified_gmt":"2020-09-28T05:42:51","slug":"cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","title":{"rendered":"Cisco ISE: Krijimi i p\u00ebrdoruesve, shtimi i server\u00ebve LDAP, integrimi me AD. Pjesa 2","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Cisco<\/p>\n

P\u00ebrsh\u00ebndetje n\u00eb botimin e dyt\u00eb t\u00eb ciklit t\u00eb artikujve t\u00eb dedikuar Cisco ISE. N\u00eb t\u00eb parin artikullin<\/u><\/a><\/noindex>  u theksuan p\u00ebrfitimet dhe dallimet e zgjidhjeve t\u00eb Nd\u00ebrhyrjes n\u00eb Rrethin e Rrug\u00ebve (NAC) nga standardet AAA, unik\u00ebsia e Cisco ISE, arkitektura dhe procesi i instalimit t\u00eb produktit.<\/p>\n

N\u00eb k\u00ebt\u00eb artikull ne do t\u00eb thellohemi n\u00eb krijimin e llogarive, shtimin e server\u00ebve LDAP dhe integrimin me Microsoft Active Directory, si dhe nuancat kur punojm\u00eb me PassiveID. Para leximit, rekomandoj t\u00eb njiheni me pjes\u00ebn e par\u00eb<\/u><\/a><\/noindex>.<\/p>\n

1. Disa terminologji<\/h2>\n

Identiteti i P\u00ebrdoruesit<\/strong> \u2014 llogaria e p\u00ebrdoruesit, e cila p\u00ebrmban informacionin mbi p\u00ebrdoruesin dhe formon akreditetet e tij p\u00ebr qasje n\u00eb rrjet. Parametrat e m\u00ebposht\u00ebm zakonisht specifikohen n\u00eb User Identity: emri i p\u00ebrdoruesit, adresa e post\u00ebs elektronike, fjal\u00ebkalimi, p\u00ebrshkrimi i llogaris\u00eb, grupa e p\u00ebrdoruesve dhe roli.<\/p>\n

Grupet e P\u00ebrdoruesve <\/strong>\u2014 grupet e p\u00ebrdoruesve \u2014 jan\u00eb nj\u00eb grup p\u00ebrdoruesish individual\u00eb q\u00eb kan\u00eb nj\u00eb set t\u00eb p\u00ebrbashk\u00ebt privilegjesh, q\u00eb u mund\u00ebsojn\u00eb atyre t\u00eb ken\u00eb qasje n\u00eb nj\u00eb set t\u00eb caktuar sh\u00ebrbimesh dhe funksionesh t\u00eb Cisco ISE.<\/p>\n

Grupet e Identitetit t\u00eb P\u00ebrdoruesve \u2014 <\/strong>grupet e paracaktuara t\u00eb p\u00ebrdoruesve q\u00eb tashm\u00eb kan\u00eb informacion dhe role t\u00eb caktuara. Grupet e m\u00ebposhtme t\u00eb Identitetit t\u00eb P\u00ebrdoruesve ekzistojn\u00eb si\u00e7 jan\u00eb: Employee (punonj\u00ebs), SponsorAllAccount, SponsorGroupAccounts, SponsorOwnAccounts (llogarit\u00eb e sponsorizuara p\u00ebr menaxhimin e portalit t\u00eb mysafir\u00ebve), Guest (mysafir), ActivatedGuest (mysafir i aktivizuar).<\/p>\n

Roli i P\u00ebrdoruesit \u2014 <\/strong>roli i p\u00ebrdoruesit \u2014 \u00ebsht\u00eb nj\u00eb grup lejesh q\u00eb p\u00ebrcakton se cilat detyra mund t\u00eb kryej\u00eb p\u00ebrdoruesi dhe n\u00eb cilat sh\u00ebrbime mund t\u00eb ket\u00eb qasje. Shpesh, roli i p\u00ebrdoruesit lidhet me grupin e p\u00ebrdoruesve.<\/p>\n

P\u00ebr m\u00eb tep\u00ebr, \u00e7do p\u00ebrdorues dhe grup p\u00ebrdoruesish ka atribute shtes\u00eb q\u00eb lejojn\u00eb identifikimin dhe p\u00ebrcaktimin m\u00eb t\u00eb qart\u00eb t\u00eb k\u00ebtij p\u00ebrdoruesi (grupi t\u00eb p\u00ebrdoruesve). M\u00eb shum\u00eb informacion n\u00eb udh\u00ebzues<\/u><\/a><\/noindex>.<\/p>\n

2. Krijimi i p\u00ebrdoruesve lokal\u00eb<\/h2>\n

1) N\u00eb Cisco ISE ka mund\u00ebsin\u00eb p\u00ebr t\u00eb krijuar p\u00ebrdorues lokal\u00eb dhe p\u00ebr t'i p\u00ebrdorur ata n\u00eb politikat e aksesit ose madje p\u00ebr t'u dh\u00ebn\u00eb rolin e administrat\u00ebs s\u00eb produktit. Zgjidhni Administration \u2192 Identity Management \u2192 Identities \u2192 Users \u2192 Add.<\/em><\/p>\n

\"CiscoFigura 1. Shtimi i nj\u00eb p\u00ebrdoruesi lokal n\u00eb Cisco ISE<\/p>\n

2) N\u00eb dritaren q\u00eb shfaqet, krijoni nj\u00eb p\u00ebrdorues lokal, jepni atij nj\u00eb fjal\u00ebkalim dhe parametra t\u00eb tjer\u00eb t\u00eb kuptuesh\u00ebm.<\/p>\n

\"CiscoFigura 2. Krijimi i nj\u00eb p\u00ebrdoruesi lokal n\u00eb Cisco ISE<\/p>\n

3) P\u00ebrdoruesit gjithashtu mund t\u00eb importohen. N\u00eb k\u00ebt\u00eb sked\u00eb Administration \u2192 Identity Management \u2192 Identities \u2192 Users <\/em>zgjidhni opsionin Importo <\/em>dhe ngarkoni nj\u00eb skedar csv ose txt me p\u00ebrdoruesit. P\u00ebr t\u00eb marr\u00eb nj\u00eb shabllon, zgjidhni Generate a Template<\/em>: pastaj plot\u00ebsojeni at\u00eb me informacionin e p\u00ebrdoruesve n\u00eb nj\u00eb format t\u00eb p\u00ebrshtatsh\u00ebm.<\/p>\n

\"CiscoFigura 3. Importimi i p\u00ebrdoruesve n\u00eb Cisco ISE<\/p>\n

3. Shtimi i server\u00ebve LDAP<\/h2>\n

Rikujtoj se LDAP \u2014 \u00ebsht\u00eb nj\u00eb protokoll popullor i nivelit t\u00eb aplikacioneve, q\u00eb lejon marrjen e informacionit, autentikimin, k\u00ebrkimin e llogarive n\u00eb katalog\u00ebt e server\u00ebve LDAP, punon n\u00eb portin 389 ose 636 (SSL). Disa shembuj t\u00eb shk\u00eblqyer t\u00eb server\u00ebve LDAP jan\u00eb Active Directory, Sun Directory, Novell eDirectory dhe OpenLDAP. \u00c7do regjistrim n\u00eb katalogu LDAP p\u00ebrcaktohet nga DN (Emri i Distinguar) dhe p\u00ebr t\u00eb formuar politik\u00ebn e aksesit ngrihet detyra e t\u00ebrheqjes (retrieval) s\u00eb llogarive, grupeve t\u00eb p\u00ebrdoruesve dhe atributeve.<\/p>\n

N\u00eb Cisco ISE \u00ebsht\u00eb e mundur t\u00eb konfigurohet qasja n\u00eb shum\u00eb server\u00eb LDAP, duke realizuar k\u00ebshtu redundancy. N\u00eb rast se serveri primar (primary) LDAP nuk \u00ebsht\u00eb i qassh\u00ebm, at\u00ebher\u00eb ISE do t\u00eb p\u00ebrpiqet t\u00eb kontaktoj\u00eb serverin dyt\u00ebsor (secondary) dhe k\u00ebshtu me radh\u00eb. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse ka 2 PAN, at\u00ebher\u00eb p\u00ebr PAN-n\u00eb primare mund t\u00eb caktohet nj\u00eb LDAP si prioritar, nd\u00ebrsa p\u00ebr PAN-n\u00eb dyt\u00ebsore \u2014 nj\u00eb LDAP tjet\u00ebr.<\/p>\n

ISE mb\u00ebshtet 2 lloje lookup-esh kur punon me server\u00ebt LDAP: User Lookup dhe MAC Address Lookup. User Lookup lejon k\u00ebrkimin e p\u00ebrdoruesve n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave LDAP dhe marrjen e informacionit t\u00eb m\u00ebposht\u00ebm pa autentikim: p\u00ebrdoruesit dhe atributet e tyre, grupet e p\u00ebrdoruesve. MAC Address Lookup gjithashtu lejon, pa autentikim, k\u00ebrkimin sipas adresave MAC n\u00eb katalog\u00ebt LDAP dhe marrjen e informacionit mbi pajisjen, grupin e pajisjeve sipas adresave MAC dhe atribute t\u00eb tjera specifike.<\/p>\n

Si nj\u00eb shembull integrimi, do t\u00eb shtojm\u00eb Active Directory n\u00eb Cisco ISE si server LDAP.<\/p>\n

1) Shkoni n\u00eb sked\u00ebn Administration \u2192 Identity Management \u2192 External Identity Sources \u2192 LDAP \u2192 Add.<\/em> <\/p>\n

\"CiscoFigura 4. Shtimi i serverit LDAP<\/p>\n

2) N\u00eb panelin General <\/em>jepni emrin e serverit LDAP dhe skem\u00ebn (n\u00eb rastin ton\u00eb Active Directory). <\/p>\n

\"CiscoFigura 5. Shtimi i serverit LDAP me skem\u00ebn Active Directory<\/p>\n

3) M\u00eb pas kaloni n\u00eb Connection <\/em>sked\u00ebn dhe jepni Hostname\/IP address <\/em>Server\u00ebt AD, porti (389 \u2014 LDAP, 636 \u2014 SSL LDAP), kredencialet e administratorit t\u00eb domenit (Admin DN \u2014 DN i plot\u00eb), parametrat e tjer\u00eb mund t\u00eb lihen si\u00e7 jan\u00eb n\u00eb parazgjedhje.<\/p>\n

Sh\u00ebnim<\/strong><\/em>: p\u00ebrdorni t\u00eb dh\u00ebnat e administratorit t\u00eb domain p\u00ebr t\u00eb shmangur probleme t\u00eb mundshme.<\/p>\n

\"CiscoFigura 6. Futja e t\u00eb dh\u00ebnave t\u00eb serverit LDAP<\/p>\n

4) N\u00eb sked\u00ebn Organizata e Direktoreve <\/em>duhet t\u00eb specifikoni zon\u00ebn e katalog\u00ebve p\u00ebrmes DN, nga ku do t\u00eb nxirren p\u00ebrdoruesit dhe grupet e p\u00ebrdoruesve.<\/p>\n

\"CiscoFigura 7. P\u00ebrcaktimi i katalog\u00ebve nga ku do t\u00eb nxirren grupet e p\u00ebrdoruesve<\/p>\n

5) Shkoni n\u00eb dritaren Groups \u2192 Add \u2192 Select Groups From Directory <\/em>p\u00ebr t\u00eb zgjedhur t\u00eb t\u00ebrhiqni grupet nga serveri LDAP. <\/p>\n

\"CiscoFigura 8. Shtimi i grupeve nga serveri LDAP<\/p>\n

6) N\u00eb dritaren q\u00eb shfaqet, klikoni Retrieve Groups. <\/em>N\u00ebse grupet jan\u00eb t\u00ebrhequr, at\u00ebher\u00eb hapat paraprak\u00eb jan\u00eb kryer me sukses. N\u00eb t\u00eb kund\u00ebrt, provoni nj\u00eb administrator tjet\u00ebr dhe kontrolloni aksesin e ISE me serverin LDAP p\u00ebrmes protokollit LDAP.<\/p>\n

\"CiscoFigura 9. Lista e grupeve t\u00ebrhequr t\u00eb p\u00ebrdoruesve<\/p>\n

7) N\u00eb sked\u00ebn Attributes <\/em>mund t\u00eb specifikoni opsionalisht cilat attributet nga serveri LDAP duhet t\u00eb t\u00ebrhiqen, nd\u00ebrsa n\u00eb dritaren Advanced Settings <\/em>aktivizoni opsionin Enable Password Change<\/em>, i cili do t\u00eb detyroj\u00eb p\u00ebrdoruesit t\u00eb ndryshojn\u00eb fjal\u00ebkalimin n\u00ebse ai ka skaduar ose \u00ebsht\u00eb rikthyer. N\u00eb \u00e7do rast klikoni Paraqit <\/em>p\u00ebr t\u00eb vazhduar.<\/p>\n

8) Serveri LDAP shfaqet n\u00eb sked\u00ebn p\u00ebrkat\u00ebse dhe mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb formuar politikat e aksesit.<\/p>\n

\"CiscoFigura 10. Lista e server\u00ebve LDAP t\u00eb shtuar<\/p>\n

4. Integrimi me Active Directory<\/h2>\n

1) Pasi shtuam serverin Microsoft Active Directory si server LDAP, kemi marr\u00eb p\u00ebrdoruesit, grupet e p\u00ebrdoruesve, por jo log\u00ebt. Tani propozoj t\u00eb konfigurojm\u00eb nj\u00eb integrim t\u00eb plot\u00eb t\u00eb AD me Cisco ISE. Shkoni n\u00eb sked\u00ebn Administration \u2192 Identity Management \u2192 External Identity Sources \u2192 Active Directory \u2192 Add. <\/em><\/p>\n

Sh\u00ebnim: <\/strong><\/em>p\u00ebr nj\u00eb integrim t\u00eb suksessh\u00ebm me AD, ISE duhet t\u00eb jet\u00eb n\u00eb domen dhe t\u00eb ket\u00eb lidhje t\u00eb plot\u00eb me server\u00ebt DNS, NTP dhe AD, p\u00ebrndryshe asgj\u00eb nuk do t\u00eb funksionoj\u00eb.<\/p>\n

\"CiscoFigura 11. Shtimi i serverit Active Directory<\/p>\n

2) N\u00eb dritaren q\u00eb shfaqet, futni t\u00eb dh\u00ebnat e administratorit t\u00eb domenit dhe vendosni shenj\u00ebn Store Credentials. <\/em>P\u00ebr m\u00eb tep\u00ebr, mund t\u00eb specifikoni OU (Organizational Unit), n\u00ebse ISE ndodhet n\u00eb nj\u00eb OU t\u00eb ve\u00e7ant\u00eb. M\u00eb pas do t\u00eb duhet t\u00eb zgjidhni nodet Cisco ISE q\u00eb d\u00ebshironi t\u00eb lidhni me domenin.<\/p>\n

\"CiscoFigura 12. Futja e t\u00eb dh\u00ebnave t\u00eb kredencialeve<\/p>\n

3) Para se t\u00eb shtoni kontrollet e domenit, sigurohuni q\u00eb n\u00eb PSN n\u00eb sked\u00ebn Administration \u2192 System \u2192 Deployment<\/em> t\u00eb jet\u00eb aktivizuar opsioni Passive Identity Service<\/em>. PassiveID <\/strong>\u2014 opsioni, q\u00eb lejon translacionin e User n\u00eb IP dhe anasjelltas. PassiveID merr informacion nga AD p\u00ebrmes WMI, agjent\u00ebve t\u00eb ve\u00e7ant\u00eb t\u00eb AD ose portit SPAN n\u00eb switch (nuk \u00ebsht\u00eb opsioni m\u00eb i mir\u00eb).<\/p>\n

Sh\u00ebnim: <\/strong><\/em>p\u00ebr t\u00eb kontrolluar statusin e Passive ID, shkruani n\u00eb konsol\u00ebn ISE show application status ise | include PassiveID.<\/strong><\/p>\n

\"CiscoFigura 13. Aktivizimi i opsionit PassiveID <\/p>\n

4) Shkoni n\u00eb sked\u00ebn Administration \u2192 Identity Management \u2192 External Identity Sources \u2192 Active Directory \u2192 PassiveID <\/em>dhe zgjidhni opsionin Add DCs<\/em>. M\u00eb pas zgjidhni me shenja kontrollet e nevojshme t\u00eb domenit dhe klikoni OK.<\/em><\/p>\n

\"CiscoFigura 14. Shtimi i kontrolleve t\u00eb domenit<\/p>\n

5) Zgjidhni DC-t\u00eb e shtuar dhe klikoni butonin Edit. <\/em>Specifikoni FQDN <\/em>t\u00eb DC-s\u00eb tuaj, emrin e domenit dhe fjal\u00ebkalimin, si dhe opsionin e lidhjes WMI <\/em>ose Agent<\/em>. Zgjidhni WMI dhe klikoni OK.<\/em><\/p>\n

\"CiscoFigura 15. Futja e t\u00eb dh\u00ebnave t\u00eb kontrollit t\u00eb domenit<\/p>\n

6) N\u00ebse WMI nuk \u00ebsht\u00eb m\u00ebnyra e preferuar e lidhjes me Active Directory, at\u00ebher\u00eb mund t\u00eb p\u00ebrdorni agjent\u00ebt e ISE. M\u00ebnyra e agjent\u00ebve p\u00ebrfshin se mund t\u00eb instaloni agjent\u00eb t\u00eb ve\u00e7ant\u00eb n\u00eb server\u00ebt q\u00eb do t\u00eb japin ngjarjet e login-it. Ekzistojn\u00eb 2 opsione t\u00eb instalimit: automatike dhe manuale. P\u00ebr instalimin automat t\u00eb agjentit, n\u00eb t\u00eb nj\u00ebjt\u00ebn sked\u00eb PassiveID <\/em>zgjidhni pik\u00ebn Add Agent \u2192 Deploy New Agent<\/em> (DC duhet t\u00eb ket\u00eb qasje n\u00eb Internet). Pastaj plot\u00ebsoni fushat e detyrueshme (emri i agjentit, FQDN i serverit, emri\/fjal\u00ebkalimi i administratorit t\u00eb domeneve) dhe klikoni OK.<\/em><\/p>\n

\"CiscoFigura 16. Instalimi automatik i agjentit ISE<\/p>\n

7) P\u00ebr instalimin manual t\u00eb agjentit Cisco ISE, duhet t\u00eb zgjidhni pik\u00ebn Register Existing Agent.<\/em>P\u00ebr informacion, agjenti mund t\u00eb shkarkohet n\u00eb sked\u00ebn Work Centers \u2192 PassiveID \u2192 Providers \u2192 Agents \u2192 Download Agent.<\/em><\/p>\n

\"CiscoFigura 17. Shkarkimi i agjentit ISE<\/p>\n

E r\u00ebnd\u00ebsishme: <\/strong><\/em>PassiveID nuk lexon ngjarjet logoff<\/strong>! Parametri q\u00eb p\u00ebrcakton koh\u00ebn e p\u00ebrjashtimit quhet user session aging time<\/strong> dhe \u00ebsht\u00eb 24 or\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar. Prandaj duhet t\u00eb b\u00ebni logoff vet\u00eb n\u00eb p\u00ebrfundim t\u00eb dit\u00ebs s\u00eb pun\u00ebs, ose t\u00eb shkruani nj\u00eb skript q\u00eb do t\u00eb b\u00ebj\u00eb automatikisht logoff p\u00ebr t\u00eb gjith\u00eb p\u00ebrdoruesit e ky\u00e7ur. <\/p>\n

P\u00ebr t\u00eb marr\u00eb informacionin logoff<\/strong> p\u00ebrdoren \u00abEndpoint probes\u00bb \u2014 sondat e fundit. Endpoint probes n\u00eb Cisco ISE ekzistojn\u00eb disa: RADIUS, SNMP Trap, SNMP Query, DHCP, DNS, HTTP, Netflow, NMAP Scan. RADIUS <\/strong>sonda me CoA <\/strong>(Change of Authorization) paketat japin informacion mbi ndryshimin e t\u00eb drejtave t\u00eb p\u00ebrdoruesit (p\u00ebr k\u00ebt\u00eb k\u00ebrkohet 802.1X<\/strong>), dhe SNMP i konfiguruar n\u00eb switch-et e aksesit, do t\u00eb jap\u00eb informacion mbi pajisjet e lidhura dhe t\u00eb shk\u00ebputura.<\/p>\n

M\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb shembull, i p\u00ebrshtatsh\u00ebm p\u00ebr konfigurimin e Cisco ISE + AD pa 802.1X dhe RADIUS: p\u00ebrdoruesi \u00ebsht\u00eb i ky\u00e7ur n\u00eb nj\u00eb makin\u00eb Windows, pa b\u00ebr\u00eb logoff, hyn nga nj\u00eb PC tjet\u00ebr p\u00ebrmes WiFi. N\u00eb k\u00ebt\u00eb rast, sesioni n\u00eb PC-n\u00eb e par\u00eb do t\u00eb mbetet aktiv derisa t\u00eb ndodh\u00eb skadimi i koh\u00ebs ose logoff-i i detyruar. At\u00ebher\u00eb, n\u00ebse pajisjet kan\u00eb t\u00eb drejta t\u00eb ndryshme, pajisja e fundit t\u00eb cil\u00ebn u ky\u00e7 \u00ebsht\u00eb ajo q\u00eb do t\u00eb zbatoj\u00eb t\u00eb drejtat e saj.<\/p>\n

8) Shtes\u00eb n\u00eb sked\u00ebn Administrata \u2192 Menaxhimi i Identitetit \u2192 Burimet e Identitetit t\u00eb Jasht\u00ebm \u2192 Active Directory \u2192 Grupi \u2192 Shto \u2192 Zgjidh Grupet nga Direktoriumi <\/em>mund t\u00eb zgjidhni grupet nga AD q\u00eb d\u00ebshironi t\u00eb importoni n\u00eb ISE (n\u00eb rastin ton\u00eb, kjo u krye n\u00eb pika 3 \"Shtimi i serverit LDAP\"). Zgjidhni opsionin Merr Grupet \u2192 OK<\/em>. <\/p>\n

\"CiscoFig. 18 a). Importimi i grupeve t\u00eb p\u00ebrdoruesve nga Active Directory<\/p>\n

9) N\u00eb sked\u00ebn Qendrat e Pun\u00ebs \u2192 PassiveID \u2192 P\u00ebrcaktimi \u2192 Paneli i Kontrollit<\/em> mund t\u00eb monitoroni numrin e seancave aktive, numrin e burimeve t\u00eb t\u00eb dh\u00ebnave, agjent\u00ebve dhe t\u00eb tjera.<\/p>\n

\"CiscoFig. 19. Monitorimi i aktiviteteve t\u00eb p\u00ebrdoruesve t\u00eb domain-it<\/p>\n

10) N\u00eb tabel\u00ebn Seancat e Jet\u00ebs<\/em> shfaqen seancat aktuale. Integrimi me AD \u00ebsht\u00eb konfiguruar.<\/p>\n

\"CiscoFig. 20. Seancat aktive t\u00eb p\u00ebrdoruesve t\u00eb domain-it<\/p>\n

5. P\u00ebrfundimi<\/h2>\n

N\u00eb k\u00ebt\u00eb artikull u shqyrtuan temat e krijimit t\u00eb p\u00ebrdoruesve lokal\u00eb n\u00eb Cisco ISE, shtimi i server\u00ebve LDAP dhe integrimi me Microsoft Active Directory. Artikulli i ardhsh\u00ebm do t\u00eb trajtoj\u00eb qasjen e mysafir\u00ebve n\u00eb form\u00ebn e nj\u00eb udh\u00ebzuesi t\u00eb detajuar.<\/p>\n

N\u00ebse keni pyetje n\u00eb lidhje me k\u00ebt\u00eb tem\u00eb ose keni nevoj\u00eb p\u00ebr ndihm\u00eb n\u00eb testimin e produktit, kontaktoni n\u00eb lidhjes<\/u><\/a><\/noindex>.<\/p>\n

Ndjekni azhurnimet n\u00eb kanalet tona (Telegram<\/u><\/a><\/noindex>, Facebook<\/u><\/a><\/noindex>, VK<\/u><\/a><\/noindex>, Blogu i Zgjidhjeve TS<\/u><\/a><\/noindex>, Yandex.Zen<\/u><\/a><\/noindex>).<\/p>\n

Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e \u0432\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0446\u0438\u043a\u043b\u0430 \u0441\u0442\u0430\u0442\u0435\u0439, \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u043d\u043e\u043c\u0443 Cisco ISE. \u0412 \u043f\u0435\u0440\u0432\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435  \u0431\u044b\u043b\u0438 \u043e\u0441\u0432\u0435\u0449\u0435\u043d\u044b \u043f\u0440\u0435\u0438\u043c\u0443\u0449\u0435\u0441\u0442\u0432\u0430 \u0438 \u043e\u0442\u043b\u0438\u0447\u0438\u044f Network Access Control (NAC) \u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u043e\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u0410\u0410\u0410, \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c Cisco ISE, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 \u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430. \u0412 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0443\u0433\u043b\u0443\u0431\u0438\u043c\u0441\u044f \u0432 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044e LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044e \u0441 Microsoft Active Directory, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432 \u043d\u044e\u0430\u043d\u0441\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95331,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95330","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cisco ISE: Krijimi i p\u00ebrdoruesve, shtimi i server\u00ebve LDAP, integrimi me AD. Pjesa 2 | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Cisco ISE: \u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 LDAP \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432, \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f \u0441 AD. \u0427\u0430\u0441\u0442\u044c 2 | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/cisco-ise-sozdanie-polzovatelej-dobavlenie-ldap-serverov-integracziya-s-ad-chast-2","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-28T05:42:51+00:00","article:modified_time":"2020-09-28T05:42:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95330","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:07:33","updated":"2022-09-28 09:57:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=95330"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/95330\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/95331"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=95330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=95330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=95330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}