Palo Alto Network User-ID Agent Setup Not Saving

[Joseph_Hensley]

I have set LDAP setting in my Panorama (M600) templates but when pushed to a branch device (lab in this instance - PA-440) the User-ID Agent information is not being retained. I have attempted to override the setting and set the information locally, but even after writing it locally, the information disappears. Details on device below. Any suggestions on how to get this information to save would be greatly appreciated.

model: PA-440
serial: 021201033834
cloud-mode: non-cloud
sw-version: 10.2.2-h2
global-protect-client-package-version: 0.0.0
device-dictionary-version: 67-374
device-dictionary-release-date: 2023/02/02 20:10:02 CST
app-version: 8705-8026
app-release-date: 2023/05/04 18:13:23 CDT
av-version: 4444-4961
av-release-date: 2023/05/08 07:46:58 CDT
threat-version: 8705-8026
threat-release-date: 2023/05/04 18:13:23 CDT
wf-private-version: 0
wf-private-release-date: unknown
url-db: paloaltonetworks
wildfire-version: 766857-770323
wildfire-release-date: 2023/05/09 06:12:50 CDT
wildfire-rt: Disabled
url-filtering-version: 0000.00.00.000
global-protect-datafile-version: unknown
global-protect-datafile-release-date: unknown
global-protect-clientless-vpn-version: 0
global-protect-clientless-vpn-release-date:
logdb-version: 10.2.0
platform-family: 400
vpn-disable-mode: off
multi-vsys: off

[BPry · Accepted solution]

@Joseph_Hensley,

Sounds like you could be hitting PAN-197339. I'd apply 10.2.4 and you should be all set. 

[Joseph_Hensley]

Thank you for the fast response, this is exactly what it was.