Losing group mappings suddenly

soporteseguridad — Mon, 21 Mar 2016 15:43:41 GMT

Hi,

We have a PA3020 with PanOS 6.1.10. We are having problem with any groups, suddenly the Palo Alto loses group mappings in 2 groups and the rule stops matching, we dont know why PA stops identifying the groups.

I have checked the useridd.log file and i see these errors in the groups...why?

Error: pan_ldap_ctrl_search_single_group(pan_ldap_ctrl.c2657): failed to get group obj for `cn=pa_vdi,ou=firewall,ou=groups...'

thanks

Re: Losing group mappings suddenly

Raido_Rattameister — Mon, 21 Mar 2016 15:54:37 GMT

What is output of:

show user group-mapping state all

Have you moved groups around in AD hierarchy (moved from one OU to other)?

topic Losing group mappings suddenly in General Topics

Losing group mappings suddenly

Re: Losing group mappings suddenly