"Delete mapping failed" from XML API / uid-message / logout

[le.wang]

We send IP to userid mapping data to Palo Alto via the XML api.   We've had success with PAN-OS 5.0.   However, with Palo Alto 8(8.1.0) we recieve "Delete mapping failed" messages when we attempt to notify Palo Alto an user has left the network (logout).  

Is there a new requirement or configuration on Palo Alto 8 or is there something wrong in the request message?

Example request:

<uid-message>

<version>1.0</version>

<type>update</type>

<payload>

<logout>

<entry name="11:22:33:aa:bb:cc" ip="10.65.69.147"/>

</logout>

</payload>

</uid-message>

Response:

<response status="error">

<msg><line><uid-response>

<version>2.0</version>

<payload>

<logout>

<entry name="11:22:33:aa:bb:cc" ip="10.65.69.147" message="Delete mapping failed"/>

</logout>

</payload>

</uid-response>

</line></msg></response>

IP user info on Paloalto server:

> show user ip-user-mapping-mp ip 10.65.69.147

IP address: 10.65.69.147 (vsys1)
User: wangle
From: XMLAPI
Timeout: 2580s
Created: 120s ago

Thanks,

Le Wang

[JimmyHolland]

Hio @le.wang, in your example, the current User-ID entry is for username "wangle" per "show user ip-user-mapping-mp ip 10.65.69.147". But, your API call is trying to remove/logout username "11:22:33:aa:bb:cc". Is that the problem?