User mapping not happening properly

[Vijaygvasan]

We have recently added a user in the server list.

We are able to see the user in LDAP but when it comes to firewall we are not able to see the user in security policy.

When i checked the user with following command

show user ip-user-mapping all | match user name

I am not able to find that user as well.

As a trouble shooting can i restart the user mapping software at firewall end and check?

Cheers

[Abdul-Fattah]

@Vijaygvasan,

resarting the user-id process should solve this, but be aware that all info about the user will disapper and repopulated again.

you can try to refresh the group-mapping:

refresh: debug user-id refresh group-mapping

reset: debug user-id reset group-mapping

if it does not work, also you ca try to refresh the user-ip-mapping agent:

for certain IP: debug user-id refresh user-id ip (ip) agent (Agent-name)

for certain agent, : debug user-id refresh user-id (Agent-name).

for all agents : debug user-id refresh user-id all.

for more info check this out: https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClVtCAK

[Vijaygvasan]

Thanks for sharing the insights

Cheers