topic Re: Unable to see groups in group mapping setting in Palo alto in General Topics

Unable to see groups in group mapping setting in Palo alto

KashifSh — Thu, 18 Nov 2021 10:32:21 GMT

Group with three to 4 user was added in ad with group name (vpn group for laptop) and this group was under OU group id, but in group id i was able to see groups till alphabet N ,so tested creating Group with group name (ATEST users) i was able to see this group ,but

(vpn group for laptop) this group was not visible

Tried all below commands:-

>show user group list
>show user group mapping statistics
>debug user id refresh group mapping all.

But still was not able to see (vpn group for laptop) this group.

At the end moved this group to another OU where limited groups were there and here i was able to find this group in list.

So my doubt is is this issue was beacuse of limitation of OU where First i was adding group ?

is there any limit like this much users will be displayed under OU?

I have also attached snapshot.

Re: Unable to see groups in group mapping setting in Palo alto

PavelK — Thu, 18 Nov 2021 12:29:01 GMT

Thank you for the post @KashifSh

This issue might be related to this KB: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClvACAS

When you type the AD group name directly in the search field does it come up? Below is a sample:

Kind Regards

Pavel

Re: Unable to see groups in group mapping setting in Palo alto

KashifSh — Tue, 23 Nov 2021 08:26:00 GMT

thanks @PavelK