user ID agent log : can't find member

[anider]

Hello,

On my user ID Agent log on domain server, i have this line,

10/25/12 10:20:36:823[Debug  643]: ldap_search....

10/25/12 10:20:36:823[Debug  682]: ldap_search done

10/25/12 10:20:36:823[Debug 1094]: The number of entries returned was 1

10/25/12 10:20:36:823[Debug 1119]: total entries returned 1

10/25/12 10:20:36:823[ Info  945]: Add domain map: anider.fr - anider

10/25/12 10:20:36:823[Debug  841]: filter is: (objectclass=group)

10/25/12 10:20:36:823[Debug  643]: ldap_search....

10/25/12 10:20:36:823[Debug  682]: ldap_search done

10/25/12 10:20:36:823[Debug 1094]: The number of entries returned was 1

10/25/12 10:20:36:823[Debug 1654]: dn normalized: "cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr", original "CN=paloaltotest,OU=Groupe Paloalto,DC=anider,DC=fr"

10/25/12 10:20:36:823[Debug 1999]: dn: "cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr", type 1

10/25/12 10:20:36:823[Debug 2051]: name "paloaltotest"

10/25/12 10:20:36:823[Debug 1581]: add object 'cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr'(name paloaltotest)

10/25/12 10:20:36:823[Debug 1119]: total entries returned 1

10/25/12 10:20:36:823[Debug 1132]: group "cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr" not changed

10/25/12 10:20:36:823[Debug 1149]: checking obj 'cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr' subgroups

10/25/12 10:20:36:823[Debug 2251]: search groups took 0s

10/25/12 10:20:36:823[Debug  841]: filter is: (objectclass=person)

10/25/12 10:20:36:823[Debug 1458]: searching user: filter '(objectclass=person)'

10/25/12 10:20:36:823[Debug  643]: ldap_search....

10/25/12 10:20:36:823[Debug  682]: ldap_search done

10/25/12 10:20:36:823[Debug 1094]: The number of entries returned was 0

10/25/12 10:20:36:823[Debug 1119]: total entries returned 0

10/25/12 10:20:36:823[Debug 2260]: search users took 0s

10/25/12 10:20:36:823[Debug 2270]: merge objects took 0s

10/25/12 10:20:36:823[Debug  485]: can't find member 'cn=testrds,ou=udm bg,ou=antenne,ou=utilisateurs,dc=anider,dc=fr' for group 'paloaltotest'

10/25/12 10:20:36:823[Debug  485]: can't find member 'cn=richard cantrel,ou=petit quevilly,ou=siège,ou=utilisateurs,dc=anider,dc=fr' for group 'paloaltotest'

10/25/12 10:20:36:823[Debug  595]: group 'cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr' has 0 members

10/25/12 10:20:36:823[Debug 2287]: expand groups took 0s

10/25/12 10:20:36:823[Debug 1199]: updated ldap 'gmapAnider', number of groups 1, took 0s

10/25/12 10:20:36:823[Debug 1148]: normalizing group(cn=paloaltotest,ou=groupe paloalto,dc=anider,dc=fr) users' names

I search to apply a rules for 1 Ad Group. i think my rules nbot ok because the mebers of group isn't find.

Any ideas to resolve this issue ?

regards,

[jdelio]

First off, has this ever worked? are there any other groups that work?  What makes this so different?

Second, it sounds like something is not setup correctly.

Either the group that is being referred to is empty, or is not defined correctly.

You will have to troubleshoot with commands like:

show user user-ID ...

show user group ...

show user group-mapping ...

This honestly looks like an issue that you will need to contact support, and we can assist that way.

Have a great day!