Group names showing full LDAP name

cenders — Thu, 10 Nov 2011 16:31:21 GMT

Prior to upgrading to v4.1, when adding an AD group to a policy, the group name used to show up as the shortened name "domain\groupname". While those policies still work post upgrading, whenever I now add a group name to a policy, the group shows up as "cn:groupname,ou:users,dc=domain,dc=local". While functional, not as cosmetic.

Is it a config/setting issue on my end where I can get the old style group names to appear or is this the new format moving forward? For what its worth, when adding users it still shows up as "domain\user".

See the attached screen shot for an example.

Re: Group names showing full LDAP name

Retired Member — Fri, 11 Nov 2011 06:22:42 GMT

With PAN-OS 4.0 we had separate PAN-agent for AD and User-ID agent for LDAP. PAN-OS 4.1 combines both into a single unified client. With 4.1 the agent will still provide IP-user mapping. But group info will now come directly from LDAP. This is why you see group info in the format you are seeing. As I understand it, this will be the format going forward.

Regards

-Richard

topic Group names showing full LDAP name in General Topics

Group names showing full LDAP name

Re: Group names showing full LDAP name