Hi @D.Maas ,
So we would have to change all rules that have the original domain format to the new userid format. This is quite a big task.
You can quickly do it via the CLI and a regex text editor.
> set cli config-output-format set
> configure
# show rulebase security | match source-user
If you have a regex text editor you can copy the output and quickly change $username@domain.com to domain\$username for all your users. Paste into the CLI. You can have both formats for a period of transition. To delete the original formats, change the original set to delete and paste. If the users now match groups, you can use the group instead.
Also what I found was that if you use a group within the agent profile for identification does not work, using either the domain\groupname or the cn of the groupname.
I have tested groups in the portal agent config before. Converting the format is the 1st step to the users matching groups. Did you try the commands I mentioned above? The username must match exactly. Here they are again. Substitute the bogus group name with yours.
> show user ip-user-mapping all
> show user group list
> show user group name "cn=it_operations,cn=users,dc=al,dc=com"
Thanks,
Tom
... View more