topic Re: ISE Test User Authentication not returning groups in Network Access Control

ISE Test User Authentication not returning groups

joeharb — Mon, 29 Jan 2024 17:27:40 GMT

We are running ISE version 3.1.0.518 Patch 7 and when we attempt to Test a User and see their groups from AD we see the SID but the name is not resolved or returned.

Please see the screenshot..

Thanks,

Re: ISE Test User Authentication not returning groups

Aref Alsouqi — Mon, 29 Jan 2024 17:40:10 GMT

If you try to run the active directory health checks from the "Active Directory Diagnostic Tool" page do you see any errors?

Re: ISE Test User Authentication not returning groups

joeharb — Mon, 29 Jan 2024 17:52:28 GMT

I have never used that tool...I do some failures for DNS SRV record query and DNS SRV record size as well as some warnings:
[cid:image001.png@01DA52A9.953F8690]

Re: ISE Test User Authentication not returning groups

Rodrigo Diaz — Mon, 29 Jan 2024 18:55:10 GMT

hello @joeharb , check that the groups are correctly added within the Active Directly configuration you have, in any case you can go and try to update the SID values for the groups retrieved for the AD , review the following image

let me know if that helped.

Re: ISE Test User Authentication not returning groups

Aref Alsouqi — Tue, 30 Jan 2024 09:16:44 GMT

In addition to what @Rodrigo Diaz suggested, could you please share the results output for review please.

Re: ISE Test User Authentication not returning groups

joeharb — Tue, 30 Jan 2024 14:35:16 GMT

Ok I was able to determine that only some of the groups are able not able to be identified, I can scroll down (no side slide bar, have to use the curser).