<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: user ID agent log : can't find member in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/user-id-agent-log-can-t-find-member/m-p/2193#M1629</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;First off, has this ever worked? are there any other groups that work?&amp;nbsp; What makes this so different?&lt;/P&gt;&lt;P&gt;Second, it sounds like something is not setup correctly.&lt;/P&gt;&lt;P&gt;Either the group that is being referred to is empty, or is not defined correctly.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You will have to troubleshoot with commands like:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;show user user-ID ...&lt;/P&gt;&lt;P&gt;show user group ...&lt;/P&gt;&lt;P&gt;show user group-mapping ...&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This honestly looks like an issue that you will need to contact support, and we can assist that way.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Have a great day!&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Tue, 30 Oct 2012 19:45:15 GMT</pubDate>
    <dc:creator>jdelio</dc:creator>
    <dc:date>2012-10-30T19:45:15Z</dc:date>
    <item>
      <title>user ID agent log : can't find member</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-id-agent-log-can-t-find-member/m-p/2192#M1628</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;On my user ID Agent log on domain server, i have this line,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;10/25/12 10:20:36:823[Debug&amp;nbsp; 643]: ldap_search....&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 682]: ldap_search done&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1094]: The number of entries returned was 1&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1119]: total entries returned 1&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[ Info&amp;nbsp; 945]: Add domain map: anider.fr - anider&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 841]: filter is: (objectclass=group)&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 643]: ldap_search....&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 682]: ldap_search done&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1094]: The number of entries returned was 1&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1654]: dn normalized: "cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr", original "CN=paloaltotest,OU=Groupe Paloalto,DC=anider,DC=fr"&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1999]: dn: "cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr", type 1&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 2051]: name "paloaltotest"&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1581]: add object 'cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr'(name paloaltotest)&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1119]: total entries returned 1&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1132]: group "cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr" not changed&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1149]: checking obj 'cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr' subgroups&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 2251]: search groups took 0s&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 841]: filter is: (objectclass=person)&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1458]: searching user: filter '(objectclass=person)'&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 643]: ldap_search....&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 682]: ldap_search done&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1094]: The number of entries returned was 0&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1119]: total entries returned 0&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 2260]: search users took 0s&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 2270]: merge objects took 0s&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 485]: can't find member 'cn=testrds,ou=udm bg,ou=antenne,ou=utilisateurs,dc=anider,dc=fr' for group 'paloaltotest'&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 485]: can't find member 'cn=richard cantrel,ou=petit quevilly,ou=siÃ¨ge,ou=utilisateurs,dc=anider,dc=fr' for group 'paloaltotest'&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug&amp;nbsp; 595]: group 'cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr' has 0 members&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 2287]: expand groups took 0s&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1199]: updated ldap 'gmapAnider', number of groups 1, took 0s&lt;/P&gt;&lt;P&gt; 10/25/12 10:20:36:823[Debug 1148]: normalizing group(cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr) users' names&lt;/P&gt;&lt;P&gt;I search to apply a rules for 1 Ad Group. i think my rules nbot ok because the mebers of group isn't find.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any ideas to resolve this issue ?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;regards,&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 25 Oct 2012 12:27:22 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-id-agent-log-can-t-find-member/m-p/2192#M1628</guid>
      <dc:creator>anider</dc:creator>
      <dc:date>2012-10-25T12:27:22Z</dc:date>
    </item>
    <item>
      <title>Re: user ID agent log : can't find member</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/user-id-agent-log-can-t-find-member/m-p/2193#M1629</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;First off, has this ever worked? are there any other groups that work?&amp;nbsp; What makes this so different?&lt;/P&gt;&lt;P&gt;Second, it sounds like something is not setup correctly.&lt;/P&gt;&lt;P&gt;Either the group that is being referred to is empty, or is not defined correctly.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You will have to troubleshoot with commands like:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;show user user-ID ...&lt;/P&gt;&lt;P&gt;show user group ...&lt;/P&gt;&lt;P&gt;show user group-mapping ...&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This honestly looks like an issue that you will need to contact support, and we can assist that way.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Have a great day!&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Tue, 30 Oct 2012 19:45:15 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/user-id-agent-log-can-t-find-member/m-p/2193#M1629</guid>
      <dc:creator>jdelio</dc:creator>
      <dc:date>2012-10-30T19:45:15Z</dc:date>
    </item>
  </channel>
</rss>

