Command user group name not working

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Command user group name not working

L4 Transporter

Hi,

 

We just check that the command:  show user group name 'cn=......' has this output: 

user group xxxxx does not exist or does not have members. All config is OK. 

 

If we run "show user group list", i can see al the groups, but filtering by one of them shows:

user group xxxxx does not exist or does not have members

 

show user ip-user-mapping all ---> OK

show user user-ids match-user xxxx ---> OK

 

 

Why is not showing users in groups?

7 REPLIES 7

Cyber Elite
Cyber Elite

@BigPalo,

Is the group in your group-include-list? My first thought would be that you are trying to look at group membership for a group that the firewall isn't actively pulling, thus it doesn't know/care if anyone is in that group. Trying running the same command on something that you are actively included in your group-include-list and you should have all members listed. 

Yes, group is included in the list. We tried to put all in list, just in case, but the result is the same. Its weird...

 

Its happening with all the groups in "show user group list". 

@BigPalo,

Hmm that's really odd. I might try restarting the management plane just to see if that resolves the issue, otherwise I would open a support case about it.

Probably teaching you to suck eggs here but have you copied and paste group name as syntax is essential here..

 

also.. do you have any special characters in the group name such as ampersand or comma...

 

do you get the expected output from  show user group-mapping state all.    Return the expected output.

 

do you only have permissions to see the groups but not the members.

 

is your group mapping correct....   ie- object for both group objects and user objects.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!