topic Re: ldap user group unable to get access in General Topics

ldap user group unable to get access

inderjit21 — Wed, 19 Dec 2018 02:29:38 GMT

I have ldap server setup with auth profile. User gets authenticate by ldap server and can login via global protect.

User is part og the group and a policy is created for this group to access resources.

If i change the group to any access is granted but not with specific group in policy.

BPry — Wed, 19 Dec 2018 04:07:53 GMT

Have you verified that the group is in the group-include list?

Mick_Ball — Wed, 19 Dec 2018 08:51:41 GMT

also... remember that adding users to groups can take up to 45 mins to replicate to Palo.

this will force an update...

debug user-id refresh group-mapping all

to see your included groups

show user group list

to list known users in a group

show user group name "group-name-from-above-command"