topic Betreff: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet in General Topics

Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Ben-Price — Mon, 27 Sep 2021 01:23:27 GMT

Hi All,

While troubleshooting a intermittent GP issue, I have noticed the below error repeating in the useridd.log.

I am not sure if this part of the problem or not, but it does look a little worrying. I can still browse AD from the firewall and find groups.

2021-09-20 16:18:10.268 +1000 connecting to ldap://[192.168.1.1]:389 ...
2021-09-20 16:18:10.273 +1000 ldap cfg UserGroupMapping connected to 192.168.1.1:389(index 0)
2021-09-20 16:18:10.327 +1000 Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

I can also see groups mapped when I run the below command:

>show user group-mapping state all

Performing the below commands hasn't seemed to help either:

> debug user-id reset group-mapping all

>debug software restart process user-id

User-ID is still functioning in some respect as people are able to authenticate to GP and users are able to access resources through security policy rules where user-id is defined.

Any ideas on how to resolve this error?

Thanks in advance.

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Ben-Price — Wed, 13 Oct 2021 05:07:33 GMT

@BPry @reaper Any ideas here?

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Joshan_Lakhani — Sun, 05 Dec 2021 08:25:16 GMT

@Ben-Price

Did this issue resolved. As iam also facing same issue.

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Ben-Price — Sun, 05 Dec 2021 22:14:37 GMT

@Joshan_Lakhani No sorry it was never resolved. Still pending.

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Ramakrishnan — Sat, 29 Jan 2022 09:17:53 GMT

I am also having this issue.

pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

When I supply this command seems its pulling and have it in db, It appears to me that, when I created the use names its getting populated in PA, but unable t login in with username

User Name Vsys Groups
------------------------------------------------------------------
ramslab.local\fwadmin vsys1 cn=administrators,cn=builtin,dc=ramslab,dc=local
cn=domain users,cn=users,dc=ramslab,dc=local
cn=users,cn=builtin,dc=ramslab,dc=local
cn=domain admins,cn=users,dc=ramslab,dc=local
cn=denied rodc password replication group,cn=users,dc=ramslab,dc=local
ramslab.local\azwinadmin vsys1 cn=administrators,cn=builtin,dc=ramslab,dc=local
cn=domain users,cn=users,dc=ramslab,dc=local
cn=users,cn=builtin,dc=ramslab,dc=local
cn=domain admins,cn=users,dc=ramslab,dc=local
cn=group policy creator owners,cn=users,dc=ramslab,dc=local
cn=schema admins,cn=users,dc=ramslab,dc=local
cn=enterprise admins,cn=users,dc=ramslab,dc=local
cn=denied rodc password replication group,cn=users,dc=ramslab,dc=local
ramslab.local\az-linx-vm-2$ vsys1 cn=domain controllers,cn=users,dc=ramslab,dc=local
cn=denied rodc password replication group,cn=users,dc=ramslab,dc=local

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

bmaxisback — Tue, 05 Apr 2022 15:12:41 GMT

I'm getting a similar error. User-ID is set to LDAP (multiple Windows Domain Controllers), they all 3 show connected, but traffic logs do not show the user, causing the traffic to miss the correct security polidy and be blocked. Useridd.log shows :
useridd.log
2022-04-05 08:52:33
2022-04-05 08:52:33.609 -0400 Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1872): user_id database is not bound yet

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

OtakarKlier — Wed, 06 Jul 2022 16:41:55 GMT

Hello All,

For me it was groups that were not configured correctly after a major migration.

So it was a misconfiguration basically.

Regards,

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Gab_Petricca — Fri, 16 Sep 2022 15:03:24 GMT

Hello Brian and all,

I'm getting exactly the same error.

Did to find a fix?

Thanks!

Cheers

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

bmaxisback — Fri, 16 Sep 2022 15:15:39 GMT

@Gab_Petricca Check out this KB article:
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClphCAC

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Ramakrishnan — Sat, 17 Sep 2022 10:36:02 GMT

Yes. It got fixed. It was due to one of the Domain controllers is
communicating as expected and another reason found that bind was incorrect.
I would like to do check(re-check once)
Bind name
communication between domain controllers
Service account
Hope that would help to resolve the issue....

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

bilal_guclu — Wed, 14 Dec 2022 11:23:19 GMT

Hi, Ramakrishnan,

how to fixed. About this subject if you have any documants pls share us.

We have same issue. We between different data center Data Redistribution info shared. But including the same AD groups we see some users info, some users not see.

Betreff: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

pedro92 — Wed, 14 Dec 2022 13:45:07 GMT

Hello,

which PAN-OS version are you using? We have the same problem at the moment.
The customer who has the error is using 10.1.7

Betreff: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

bilal_guclu — Fri, 06 Jan 2023 12:10:45 GMT

Hi Pedro,

We using 10.1.5-h1 version. We couldnt solve this problem.

Re: Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1889): user_id database is not bound yet

Gustavo_Xavier — Fri, 05 Sep 2025 23:42:42 GMT

The latency identified in the firewall-AD switch may explain the instability, causing failures in loading the user base (User-ID database).

LDAP – Binding Failure

2025-08-28 21:47:13.082 -0300
Error: pan_ldap_ctrl_search_device(pan_ldap_ctrl.c:1898): user_id database is not bound yet

Network – Latency Variation (Jitter)
icmp_seq=1 time=0.9 ms
icmp_seq=2 time=1.7 ms