Problems with user mapping

[Bigtom]

Hello.

I have a little problem with user-ip mapping i have instaled PAN Agent on a server configured it and started from what i can see it reads security logs and from there maps ip to a user. Those logs presents users as shortdomainname\user. The problem is when device have to compare it to a LDAP mapped groups where users are identified as long.domain.name\user. This way i cant use proper url-fitering using users - group association. is there any way to configure ldap to use shortdomainname or PAN agent to extend shortdoaminname to long.domain.name.

I`m using os 4.1.6 and agent 4.1.4-3.

[jseals · Accepted solution]

Hello,

You may have your LDAP server profile configured with the FQDN domain name instead of the NETBIOS name.

The domain field for the LDAP server profile should have the NETBIOS name. Anything in this field gets prepended to the user's name.

For instance, if your domain is testdomain.com, the domain field should be:

testdomain

Here are two great documents to read over for UserID related issues and configuration in 4.1:

https://live.paloaltonetworks.com/docs/DOC-2132

https://live.paloaltonetworks.com/docs/DOC-3120

Please let me know if this helps.

-Jason

[ArkadiuszMatalewski]

Yes it worked thank You very much