authentication profile LDAP

Reply
Highlighted
L1 Bithead

authentication profile LDAP

Hi,

When l go to authentication profile and select "add" under allow-list for a LDAP connection it does not list all Active Directory Groups from our Domain ?

We are currently on PANOS version : 5.0.3

I also have the User ID Agent setup on both of our Windows 2008 Domain Controllers using version number : 5.0.1-2


Accepted Solutions
Highlighted
L4 Transporter

Please refer to the article below to see if user groups are being retrieved on the firewall,

Thanks,

Aditi

View solution in original post


All Replies
Highlighted
L6 Presenter

you see all groups on group mapping tab ?

Highlighted
L4 Transporter

Please refer to the article below to see if user groups are being retrieved on the firewall,

Thanks,

Aditi

View solution in original post

Highlighted
L3 Networker

See if they are included in one of your group mapping profiles;

Device -> User Identification -> Group Mapping Settings.

Open one of the valid profiles, and see that the groups you're looking for is in the group include list.

Highlighted
L1 Bithead

Thanks l have basically removed all group listings and now l can see them all..  For some reason specifying a particular OU Group that contained about 50 Groups was not showing them all.  But after not specifying no groups in the included list it now shows them all.. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!