Globalprotect - User-ID - missing domain prefix - group mapping not working

gudmundur — Fri, 27 Jan 2017 19:18:33 GMT

I have been trying to get User-id / Group mapping to work in one of our installations but without any luck

Tried both Radius and LDAP authentication.

I do see User-ID / IP mapping - but the domain prefix is missing.

"10.253.250.1 vsys1 GP sensagummi 2591361 2591361"

I do as well see User-ID / Group mapping and the domain prefix is present there

testdomain\sensagummi vsys1 cn=vpn_sensa_networking,ou=vpn,ou=group,dc=testing,dc=is

I have entered the domain name in netbios format "testdomain" under

Authentication profile and Group mapping config

But all without any luck

I have this up and running with Radius authentication on another set of PA firewalls and I just cant seem to find out what could be missing.

Re: Globalprotect - User-ID - missing domain prefix - group mapping not working

jdelio — Tue, 31 Jan 2017 22:31:44 GMT

Have you been through any of the articles talking about configuring Group Mapping?

Also,

Here is one that might help:

And another:

I hope this helps.