user to ip mapping with LDAP

[ccboe]

I have a pa 3020 running 6.0.8 doing LDAP lookups to multiple edir servers,

I have many users that PA shows as unknown but when I look on the server I see they are logged in x.x.x.x

Why does this work for some but not all?

I have done the following:

debug user-id refresh user-id agent all

debug software restart user-id

show user server-monitor state CHS1 (which shows it connected 2 seconds ago)

Thanks

Tom

[pankaku]

Unknown comes when you have enable the user identificate on the zone but firewall doesn't have the user-ip mapping for the ip address.

Have you configured agentless or agent configuration for user-ip mapping. Make sure you add all the domain controller. Check if you have configured any Included/Exclude list or not.

Hope this helps.

[tsrivastav]

Make sure the user  name which   you are using have proper permission  to read the log events

Try using admin name and credentials to see if that make any change ( if you are not usning admin user )