LDAP User Group Issue

[mrsold]

All,

We are trying to start building URL filtering.  I'm noticing that when I try and set groups in the "Group Include List" it stops at a certain letter and just gives me the "more" option but I can never finish populating the list.

Any thoughts?

[Retired Member]

How many groups do you have? If you have a very large number of groups (several hundred or more) then you could hit limits to number of groups that can be used in policy. If that is the case, then it is always recommended to filter groups to only those that you require in policies.

-Richard

[mrsold]

Yes, and that is what I'm trying to do (filter).  But when I go into the filter section in the GUI is only lists groups up to a certina point and then just says, "More..." which I can't click on to populate more groups.  I've tried adding them via CLI but it never takes the addition correctly.

[sjamaluddin]

Are your groups nested in a multi tier scenario? If so, could you perhaps consider starting the search (Base DN) to be more indented?

The delay in being able to pull nested groups may be causing issues and so you may be getting timed out, before the groups are read correctly.

[ucteam]

I've experienced this issue also within the GUI when connecting to large ldap directories... Workaround was to add the groups by the CLI.

Making sure to use full ldap path e.g

set group-mapping GROUP_MAPPER group-include-list "cn=internet power users,ou=www groups,ou=groups,dc=xyz,dc=local"