Problem with domain users to log in Palo Alto's Portal

[Hientt6]

HI all. I have the problem with domain users to log in Palo Alto's Portal. I configured as document: Admin Guide v5.0 already. However, It doesn't work correctly, domain account cannot log in. Please support me to fix this problem. Thanks

[_slv_]

Are you using agent or agentless options od AD integration?

Please share with us screenshot of your LDAP profile (in domain field should be netbios name of your domain - this is common mistake)

Regards

Slawek

[Hientt6]

Hi Slv,

I used agentless AD integration.

My LDAP profile Picture as below:

Palo Alto sees user accounts in domain:

However I configured domain user account to enable log on Portal of Palo Alto as below:

After that, I log in Palo Alto Portal, but error appears

This user belongs to domain.

Thanks

Regards,

[_slv_]

Hi Hientt

The field with arrow is really empty?

From CLI please lunch

show user ip-user-mapping all

or

show user user-IDs match-user g10005

Did You see users from selected OU ?

Regards

SLawek

[Hientt6]

Hi,

The field with arrow is empty.

From CLI, I typed as your comment and saw  information of user accounts:

Thanks