AD groups will not show up in PA

[choff123]

I have a new AD group that I made that I want to use in a PA rule. Its been 24 hours and it has not shown up.

Firmware: 4.1.7

We use Radius.

Maybe i should reboot the radius servers ...

thanks

[kadak]

Hello choff123,

Lets try refreshing the user-group mappings first. The command can be executed and is non-intrusive:

> debug user-id refresh group-mapping (Name of group-mapping, or all)

Here is another document which talks about refreshing user-groups:

Newly Added Active Directory Users do not Appear on the Firewall

Hope that helps!

Regards,

Kunal Adak.

[shasnain]

Hi,

Is the Retrieve user group checked on the radius server profile?

Thanks,

Syed R Hasnain

[hyadavalli]

Hello Choff123,

Group mapping works only with ldap server profile.

Regards,

Hari Yadavalli