show user group list - Shows custom group only

cancel
Showing results for 
Search instead for 
Did you mean: 

show user group list - Shows custom group only

Cyber Elite
Cyber Elite

Under group mappings of LDAP i have so many AD groups.

 

But when i run below command 

 

show user group list


Total: 1
1* : Custom Group

 

IT does not show me any group names from AD?

what is the reason for that?

 

Also what is difference between Custom group and AD groups in LDAP?

MP
33 REPLIES 33

also can you post a screen shot of the group include section.

 

 

show user group-mapping statistics

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Name Vsys Groups Last-Action(secs) Next-Action(secs)
---------------------------------------------------------------------------
Group_Mapping_1 vsys1 11 2587 secs ago(took 0 secs) In 1013 secs
Group_Mapping_2 vsys1 8 2590 secs ago(took 0 secs) In 1010 secs

 

 

yes i use group mapping in policies and  they work

MP

Capture1.PNG

MP

Capture2.PNG

MP

Added

MP

in your screen shot i cannot see the OU for any of the groups.

 

could you find one of the groups in the available list and make sure it has no special characters in the OU.  as below.

 

if my OU was called developer&objects it would not show in CLI.

 

uid3.png 

and i may have mentioned this before but just check your user ID agent settings and make sure none of them have a tick in "use as LDAP proxy".

I checked user id agent LDAP proxy is not checked.

MP

When i expand i can see the OU for the groups.

So OU groups should show up in the CLI or not?

MP

yes they should, i can see all of mine.

 

were these groups pushed to the firewall via a panorama template or setup directly on the firewall. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!