topic Re: Problems with user mapping in General Topics

Problems with user mapping

Bigtom — Sat, 12 May 2012 11:21:48 GMT

Hello.

I have a little problem with user-ip mapping i have instaled PAN Agent on a server configured it and started from what i can see it reads security logs and from there maps ip to a user. Those logs presents users as shortdomainname\user. The problem is when device have to compare it to a LDAP mapped groups where users are identified as long.domain.name\user. This way i cant use proper url-fitering using users - group association. is there any way to configure ldap to use shortdomainname or PAN agent to extend shortdoaminname to long.domain.name.

I`m using os 4.1.6 and agent 4.1.4-3.

Re: Problems with user mapping

jseals — Sun, 13 May 2012 18:16:32 GMT

Hello,

You may have your LDAP server profile configured with the FQDN domain name instead of the NETBIOS name.

The domain field for the LDAP server profile should have the NETBIOS name. Anything in this field gets prepended to the user's name.

For instance, if your domain is testdomain.com, the domain field should be:

testdomain

Here are two great documents to read over for UserID related issues and configuration in 4.1:

https://live.paloaltonetworks.com/docs/DOC-2132

https://live.paloaltonetworks.com/docs/DOC-3120

Please let me know if this helps.

-Jason

Re: Problems with user mapping

ArkadiuszMatalewski — Mon, 14 May 2012 09:32:41 GMT

Yes it worked thank You very much