We frequently face an error for fetching the group-mapping in the user-id tab. The error is normally shown up as failed to execute op command. One of the reason can be invalid credentials in the ldap configuration Troubleshoot this error with Tail follow yes mp-log userid-log 2014-05-04 14:31:21.052 +0400 connecting to ldap://[192.168.0.199]:389 ... 2014-05-04 14:31:21.056 +0400 Error: pan_ldap_bind_simple(pan_ldap.c:393): ldap_sasl_bind result return(49) : Invalid credentials 2014-05-04 14:31:21.056 +0400 Error: pan_user_get_ldap(pan_group_selection_n.c:67): pan_ldap_bind() failed 2014-05-04 14:31:21.056 +0400 Error: cfgagent_doop_callback(pan_cfgagent.c:503): Failed to handle op command for agent: useridd Reconfigure the credentials in the ldap profile After changing the credentials, the groups can be pulled. 2014-05-04 14:32:53.760 +0400 connecting to ldap://[192.168.0.199]:389 ... 2014-05-04 14:32:55.860 +0400 connecting to ldap://[192.168.0.199]:389 .. Aamir Khan
... View more