cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

Cyber Elite
Cyber Elite

follow @Mick_Ball 's instructions, and then verify that the users you see in the group mapping, match EXACTLY to the user you see in user mapping

show user ip-user-mapping all   or   show user ip-user-mapping ip x.x.x.x

 

if group mapping has user@domain  and ip-user-mapping has domain\user, they will not match in which case you may need to reset your domain-map (normalization key)

 

check the domain map

debug user-id dump domain-map

 

clear the domain map

debug user-id clear domain-map

 

refresh the domain map

debug user-id refresh group-mapping all

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
Who rated this post