- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
09-30-2013 04:53 AM
HI,
we just migrated from 5.0.3 to 5.0.6. And we are having some problems with the mapping in UserID. For some users the UserID is working correctly but for others users is not working...
I attached how this uses jloa log in, but i cant in the show user
admin@FW1(active)> show user ip-user-mapping all | match jloa
I have refresh the cache for users and groups.
09-30-2013 05:11 AM
i did "clear user-cache all" , "clear user-cache-mp all", "debug software restart user-id", and not worked....
the user-id is installed in my client, i cant see the config. But it was working in 5.0.3 and nothing it was changed........the UserIDs agents is all in green (OK)
how can i refresh it?
09-30-2013 05:33 AM
Do you have latest version of user-id installed?
Regards
Slawek
09-30-2013 05:36 AM
Why can't you see agent config ? From agent monitor if you can check that users are mapped or not it will be better
debug user-id refresh user-id agent all
09-30-2013 10:22 AM
Hi,
Following doc on page 8 explains how to troubleshoot for "unknown or no users in the traffic logs.
https://live.paloaltonetworks.com/docs/DOC-5662
Please also verify that it is configured correctly.
Below are few good docs on User id
https://live.paloaltonetworks.com/docs/DOC-3664
https://live.paloaltonetworks.com/docs/DOC-3120
https://live.paloaltonetworks.com/docs/DOC-1920
Hope this helps you resolve the issue.
Thank you
Numan
09-30-2013 11:14 PM
This is the state for the user id agent........ we can get something about this information???????
admin@FW1(active)> show user user-id-agent state all
Agent: DCTIC(vsys: vsys1) Host: 10.10.248.79(10.10.248.79):4444
Status : conn:idle
Version : 0x5
num of connection tried : 104
num of connection succeeded : 90
num of connection failed : 14
num of status msgs rcvd : 12373
num of request of status msgs sent : 13436
num of request of ip mapping msgs sent : 64412
num of request of new ip mapping msgs sent : 0
num of request of all ip mapping msgs sent : 109
num of user ip mapping msgs rcvd : 32127
num of ip msgs rcvd but failed to proc : 0
num of user ip mapping add entries rcvd : 139891
num of user ip mapping del entries rcvd : 0
num of request of group msgs sent : 0
num of group msgs rcvd : 0
num of group msgs recvd buf fail to proc : 0
num of xml data msgs rcvd : 0
num of xml data msgs rcvd but failed to proc : 0
Last heard(seconds ago) : 0
Messages State:
Job ID : 0
Sent messages : 78066
Rcvd messages : 44609
Lost messages : 0
Failed to send messages : 0
Queued sending msgs with priority 0 : 0
Queued sending msgs with priority 1 : 0
Queued rcvring msgs with priority 0 : 0
Queued rcvring msgs with priority 1 : 0
Agent: DC gesdocument(vsys: vsys1) Host: 10.74.248.54(10.74.248.54):4444
Status : conn:Get IPs
Version : 0x5
num of connection tried : 327
num of connection succeeded : 4
num of connection failed : 323
num of status msgs rcvd : 13131
num of request of status msgs sent : 13161
num of request of ip mapping msgs sent : 63496
num of request of new ip mapping msgs sent : 0
num of request of all ip mapping msgs sent : 23
num of user ip mapping msgs rcvd : 6677
num of ip msgs rcvd but failed to proc : 0
num of user ip mapping add entries rcvd : 12726
num of user ip mapping del entries rcvd : 3
num of request of group msgs sent : 0
num of group msgs rcvd : 0
num of group msgs recvd buf fail to proc : 0
num of xml data msgs rcvd : 0
num of xml data msgs rcvd but failed to proc : 0
Last heard(seconds ago) : 3
Messages State:
Job ID : 0
Sent messages : 76627
Rcvd messages : 19830
Lost messages : 115
Failed to send messages : 0
Queued sending msgs with priority 0 : 0
Queued sending msgs with priority 1 : 0
Queued rcvring msgs with priority 0 : 0
Queued rcvring msgs with priority 1 : 0
Agent: DC2 gesdocument(vsys: vsys1) Host: 10.30.48.15(10.30.48.15):4444
Status : conn:Get IPs
Version : 0x5
num of connection tried : 3
num of connection succeeded : 3
num of connection failed : 0
num of status msgs rcvd : 13468
num of request of status msgs sent : 13492
num of request of ip mapping msgs sent : 65061
num of request of new ip mapping msgs sent : 0
num of request of all ip mapping msgs sent : 23
num of user ip mapping msgs rcvd : 2024
num of ip msgs rcvd but failed to proc : 0
num of user ip mapping add entries rcvd : 3204
num of user ip mapping del entries rcvd : 28
num of request of group msgs sent : 0
num of group msgs rcvd : 0
num of group msgs recvd buf fail to proc : 0
num of xml data msgs rcvd : 0
num of xml data msgs rcvd but failed to proc : 0
Last heard(seconds ago) : 3
Messages State:
Job ID : 0
Sent messages : 78524
Rcvd messages : 15514
Lost messages : 91
Failed to send messages : 0
Queued sending msgs with priority 0 : 0
Queued sending msgs with priority 1 : 0
Queued rcvring msgs with priority 0 : 0
Queued rcvring msgs with priority 1 : 0
Agent: DC2(vsys: vsys1) Host: 10.33.248.143(10.33.248.143):4444
Status : conn:idle
Version : 0x5
num of connection tried : 102
num of connection succeeded : 87
num of connection failed : 15
num of status msgs rcvd : 12409
num of request of status msgs sent : 13437
num of request of ip mapping msgs sent : 64401
num of request of new ip mapping msgs sent : 0
num of request of all ip mapping msgs sent : 106
num of user ip mapping msgs rcvd : 32098
num of ip msgs rcvd but failed to proc : 0
num of user ip mapping add entries rcvd : 140122
num of user ip mapping del entries rcvd : 0
num of request of group msgs sent : 0
num of group msgs rcvd : 0
num of group msgs recvd buf fail to proc : 0
num of xml data msgs rcvd : 0
num of xml data msgs rcvd but failed to proc : 0
Last heard(seconds ago) : 0
Messages State:
Job ID : 0
Sent messages : 78050
Rcvd messages : 44613
Lost messages : 0
Failed to send messages : 0
Queued sending msgs with priority 0 : 0
Queued sending msgs with priority 1 : 0
Queued rcvring msgs with priority 0 : 0
Queued rcvring msgs with priority 1 : 0
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!