UserID problems

Reply
Highlighted
L4 Transporter

UserID problems

HI,

we just migrated from 5.0.3 to 5.0.6. And we are having some problems  with the mapping in UserID. For some users the UserID is working correctly but for others users is not working...

Log.jpg

I attached how this uses jloa log in, but i cant in the show user

admin@FW1(active)> show user ip-user-mapping all | match jloa

I have refresh the cache for users and groups.

Highlighted
L6 Presenter

do you have that users on user-id agent monitor ?

did you clear user cache and then refresh again ?

Highlighted
L4 Transporter

i did "clear user-cache all" , "clear user-cache-mp all", "debug software restart user-id", and not worked....

the user-id is installed in my client, i cant see the config. But it was working in 5.0.3 and nothing it was changed........the UserIDs agents is all in green (OK)

how can i refresh it?

Highlighted
L4 Transporter

Do you have latest version of user-id installed?

Regards

Slawek

Highlighted
L6 Presenter

Why can't you see agent config ? From agent monitor if you can check that users are mapped or not it will be better

debug user-id refresh user-id agent all

Highlighted
L5 Sessionator

Hi,

Following doc on page 8 explains how to troubleshoot for "unknown or no users in the traffic logs.

https://live.paloaltonetworks.com/docs/DOC-5662

Please also verify that it is configured correctly.

Below are few good docs on User id

https://live.paloaltonetworks.com/docs/DOC-3664

https://live.paloaltonetworks.com/docs/DOC-3120

https://live.paloaltonetworks.com/docs/DOC-1920

Hope this helps you resolve the issue.


Thank you

Numan

Highlighted
L4 Transporter

This is the state for the user id agent........ we can get something about this information???????

admin@FW1(active)> show user user-id-agent state all

Agent: DCTIC(vsys: vsys1) Host: 10.10.248.79(10.10.248.79):4444

        Status                                            : conn:idle

        Version                                           : 0x5

        num of connection tried                           : 104

        num of connection succeeded                       : 90

        num of connection failed                          : 14

        num of status msgs rcvd                           : 12373

        num of request of status msgs sent                : 13436

        num of request of ip mapping msgs sent            : 64412

        num of request of new ip mapping msgs sent        : 0

        num of request of all ip mapping msgs sent        : 109

        num of user ip mapping msgs rcvd                  : 32127

        num of ip msgs rcvd but failed to proc            : 0

        num of user ip mapping add entries rcvd           : 139891

        num of user ip mapping del entries rcvd           : 0

        num of request of group msgs sent                 : 0

        num of group msgs rcvd                            : 0

        num of group msgs recvd buf fail to proc          : 0

        num of xml data msgs rcvd                         : 0

        num of xml data msgs rcvd but failed to proc      : 0

        Last heard(seconds ago)                           : 0

        Messages State:

          Job ID                                          : 0

          Sent messages                                   : 78066

          Rcvd messages                                   : 44609

          Lost messages                                   : 0

          Failed to send messages                         : 0

          Queued sending msgs with priority 0             : 0

          Queued sending msgs with priority 1             : 0

          Queued rcvring msgs with priority 0             : 0

          Queued rcvring msgs with priority 1             : 0

Agent: DC gesdocument(vsys: vsys1) Host: 10.74.248.54(10.74.248.54):4444

        Status                                            : conn:Get IPs

        Version                                           : 0x5

        num of connection tried                           : 327

        num of connection succeeded                       : 4

        num of connection failed                          : 323

        num of status msgs rcvd                           : 13131

        num of request of status msgs sent                : 13161

        num of request of ip mapping msgs sent            : 63496

        num of request of new ip mapping msgs sent        : 0

        num of request of all ip mapping msgs sent        : 23

        num of user ip mapping msgs rcvd                  : 6677

        num of ip msgs rcvd but failed to proc            : 0

        num of user ip mapping add entries rcvd           : 12726

        num of user ip mapping del entries rcvd           : 3

        num of request of group msgs sent                 : 0

        num of group msgs rcvd                            : 0

        num of group msgs recvd buf fail to proc          : 0

        num of xml data msgs rcvd                         : 0

        num of xml data msgs rcvd but failed to proc      : 0

        Last heard(seconds ago)                           : 3

        Messages State:

          Job ID                                          : 0

          Sent messages                                   : 76627

          Rcvd messages                                   : 19830

          Lost messages                                   : 115

          Failed to send messages                         : 0

          Queued sending msgs with priority 0             : 0

          Queued sending msgs with priority 1             : 0

          Queued rcvring msgs with priority 0             : 0

          Queued rcvring msgs with priority 1             : 0

Agent: DC2 gesdocument(vsys: vsys1) Host: 10.30.48.15(10.30.48.15):4444

        Status                                            : conn:Get IPs

        Version                                           : 0x5

        num of connection tried                           : 3

        num of connection succeeded                       : 3

        num of connection failed                          : 0

        num of status msgs rcvd                           : 13468

        num of request of status msgs sent                : 13492

        num of request of ip mapping msgs sent            : 65061

        num of request of new ip mapping msgs sent        : 0

        num of request of all ip mapping msgs sent        : 23

        num of user ip mapping msgs rcvd                  : 2024

        num of ip msgs rcvd but failed to proc            : 0

        num of user ip mapping add entries rcvd           : 3204

        num of user ip mapping del entries rcvd           : 28

        num of request of group msgs sent                 : 0

        num of group msgs rcvd                            : 0

        num of group msgs recvd buf fail to proc          : 0

        num of xml data msgs rcvd                         : 0

        num of xml data msgs rcvd but failed to proc      : 0

        Last heard(seconds ago)                           : 3

        Messages State:

          Job ID                                          : 0

          Sent messages                                   : 78524

          Rcvd messages                                   : 15514

          Lost messages                                   : 91

          Failed to send messages                         : 0

          Queued sending msgs with priority 0             : 0

          Queued sending msgs with priority 1             : 0

          Queued rcvring msgs with priority 0             : 0

          Queued rcvring msgs with priority 1             : 0

Agent: DC2(vsys: vsys1) Host: 10.33.248.143(10.33.248.143):4444

        Status                                            : conn:idle

        Version                                           : 0x5

        num of connection tried                           : 102

        num of connection succeeded                       : 87

        num of connection failed                          : 15

        num of status msgs rcvd                           : 12409

        num of request of status msgs sent                : 13437

        num of request of ip mapping msgs sent            : 64401

        num of request of new ip mapping msgs sent        : 0

        num of request of all ip mapping msgs sent        : 106

        num of user ip mapping msgs rcvd                  : 32098

        num of ip msgs rcvd but failed to proc            : 0

        num of user ip mapping add entries rcvd           : 140122

        num of user ip mapping del entries rcvd           : 0

        num of request of group msgs sent                 : 0

        num of group msgs rcvd                            : 0

        num of group msgs recvd buf fail to proc          : 0

        num of xml data msgs rcvd                         : 0

        num of xml data msgs rcvd but failed to proc      : 0

        Last heard(seconds ago)                           : 0

        Messages State:

          Job ID                                          : 0

          Sent messages                                   : 78050

          Rcvd messages                                   : 44613

          Lost messages                                   : 0

          Failed to send messages                         : 0

          Queued sending msgs with priority 0             : 0

          Queued sending msgs with priority 1             : 0

          Queued rcvring msgs with priority 0             : 0

          Queued rcvring msgs with priority 1             : 0

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!