Globalprotect - User-ID - missing domain prefix - group mapping not working

[gudmundur]

Hi

I have been trying to get User-id / Group mapping to work in one of our installations but without any luck

Tried both Radius and LDAP authentication.

I do see User-ID / IP mapping - but the domain prefix is missing.

"10.253.250.1 vsys1 GP sensagummi 2591361 2591361"

I do as well see User-ID / Group mapping and the domain prefix is present there 

testdomain\sensagummi                vsys1   cn=vpn_sensa_networking,ou=vpn,ou=group,dc=testing,dc=is

I have entered the domain name in netbios format "testdomain" under 

Authentication profile and Group mapping config

But all without any luck 

I have this up and running with Radius authentication on another set of PA firewalls and I just cant seem to find out what could be missing.

[jdelio]

Have you been through any of the articles talking about configuring Group Mapping? 

How to Configure Group Mapping Settings

Also,

Here is one that might help:

IP-to-User Mappings Have Inconsistent Domain Prefix

And another:

How to Configure Group-Mapping in a Multi-Domain Active Directory Domain Services (AD DS) Forest

I hope this helps.​​​​​​​