topic Re: LDAP User Group Issue in General Topics

LDAP User Group Issue

mrsold — Thu, 26 Apr 2012 18:07:12 GMT

All,

We are trying to start building URL filtering. I'm noticing that when I try and set groups in the "Group Include List" it stops at a certain letter and just gives me the "more" option but I can never finish populating the list.

Any thoughts?

Re: LDAP User Group Issue

Retired Member — Sat, 28 Apr 2012 19:58:53 GMT

How many groups do you have? If you have a very large number of groups (several hundred or more) then you could hit limits to number of groups that can be used in policy. If that is the case, then it is always recommended to filter groups to only those that you require in policies.

-Richard

Re: LDAP User Group Issue

mrsold — Mon, 30 Apr 2012 13:13:52 GMT

Yes, and that is what I'm trying to do (filter). But when I go into the filter section in the GUI is only lists groups up to a certina point and then just says, "More..." which I can't click on to populate more groups. I've tried adding them via CLI but it never takes the addition correctly.

Re: LDAP User Group Issue

sjamaluddin — Wed, 02 May 2012 23:00:11 GMT

Are your groups nested in a multi tier scenario? If so, could you perhaps consider starting the search (Base DN) to be more indented?

The delay in being able to pull nested groups may be causing issues and so you may be getting timed out, before the groups are read correctly.

Re: LDAP User Group Issue

ucteam — Fri, 04 May 2012 15:27:43 GMT

I've experienced this issue also within the GUI when connecting to large ldap directories... Workaround was to add the groups by the CLI.

Making sure to use full ldap path e.g

set group-mapping GROUP_MAPPER group-include-list "cn=internet power users,ou=www groups,ou=groups,dc=xyz,dc=local"