I have a problem with IP User Mapping. I has configured IP User Mapping using this article:
https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-Agentless-User-ID/ta-p/...
But when I list users, I get inconsistent user domain prefix:
show user ip-user-mapping all
IP Vsys From User IdleTimeout(s) MaxTimeout(s)
--------------- ------ ------- -------------------------------- -------------- -------------
xxx.xxx.xxx.xxx vsys1 AD domain\3279 2532 2532
xxx.xxx.xxx.xxx vsys1 AD domain\2558157 1268 1268
xxx.xxx.xxx.xxx vsys1 AD domain\188517 1390 1390
xxx.xxx.xxx.xxx vsys1 AD domain.root.local\2803275 2021 2021
xxx.xxx.xxx.xxx vsys1 AD domain.root.local\527257 824 824
xxx.xxx.xxx.xxx vsys1 AD domain\60494 1647 1647
What is wrong?
Some information:
PA 3050
PANOS 7.1.7
>show user server-monitor statistics
Directory Servers:
Name TYPE Host Vsys Status
-----------------------------------------------------------------------------
host01.domain.root.local AD host01.domain.root.local vsys1 Connected
>show user server-monitor state all
UDP Syslog Listener Service is disabled
SSL Syslog Listener Service is disabled
Server: host01.domain.root.local(vsys: vsys1)
Host: host01.domain.root.local
num of log query made : 17743
num of log query failed : 0
num of log read : 1332804
last record timestamp : 1494428436
last record time : 20170510150036.541714-000