"No multiusersystem configured" from XML API / uid-message / logout

[NickRamirez]

We send IP to userid mapping data to Palo Alto via the XML api.   We've had success with Palo Alto versions 6 and 7.   However, with Palo Alto 8(8.0.5) we recieve "No multiusersystem configured" messages when we attempt to notify Palo Alto an user has left the network (logout).   I understand "multiusersystem" relates to terminal servers, etc but our logins and user-id mappings do not involve the multiuser systems nor do we attemp to populate those "tags" of the XML.

Is there a new requirement or configuration on Palo Alto 8 that we are missing relating to "multiusersystems" or is this possibly a bug?

Example request:

<uid-message>
<version>1.0</version>
<type>update</type>
<payload>
<logout>
<entry ip="192.168.7.3" name="CLOUDPATH\nick" timeout="120"/>
</logout>
</payload>
</uid-message>

Response:

<response status="error">
<msg><line><uid-response>
<version>2.0</version>
<payload>
<login>
</login>
<logout>
<entry name="CLOUDPATH\nick" ip="192.168.7.3" message="No multiusersystem configured"/>
</logout>
</payload>
</uid-response>
</line></msg></response>

Thanks,

Nick Ramirez

[charles.thompson]

Are you modifying the request from Arris' Cloudpath SE directly? If so what config file(s) are you modifying? I ask because I'm trying to normalize the netbios domain name of the user sent to the PAs in order to match or domain group mapping. 

Thanks!

Charles