ASA LDAP is not find memberOf Active Directory domain users group

It seems that any group I have add an account for the ldap memberOf thinks it is except for the domain users group. Is there a specific exclusion of this group somewhere? It does not seem to be a problem with space in name, because if I test it with other default groups like domain administrators, it works. I get the same result of the ldap attribute card as long as you try to use the domain users group in a DAP policy. Debugging ldap 255 returns every other group membership for an account with the exception of users in the domain.

When I run the command "sh filter LDAP ad 'Domain' group ' is the domain users group in the list of results, so he is able to see it and it exists."

Please see the attached link under primaryGroupID, which states that the Domain Users group is not part of the memberOf attribute. http://msdn.microsoft.com/en-us/library/ms677943.aspx That explains why the mapping fails for any Domain Users as seen in the debugs

Tags: Cisco Security

Similar Questions

Maybe you are looking for