ISE is unable to retrieve groups and attributes

[steelinquisitor]

Hello guys,

I have Cisco ISE installed on EXSi in a lab. I was able to join the ISE server to my test Active Directory server, and under the OU=Computers, I can see my ISE hostname.

However, when I go to Administrator > External Identity Sources > Active Directory > Groups > Add > Select Group from Directory:

I have my domain entered in Domain box and an * for filter. When I clicked the "Retrieve Groups" button, I always received "Number of Groups Retrieved: 0 (Limit is 100)"

It seem like ISE is unable to retrieve the groups that I have on my AD. I checked the status of my ISE server and it says that it is still connected to the domain. When I search for attributes, it keep saying that the user is not found.

I disabled my AD's firewall and still getting the same results. I ran the detailed test connection, and it was a success and the port connections are all good. At this point, I am pretty much stuck.

Any help would be greatly appreciated.

Thanks

[Jatin Katyal]

Couple of questions:

What version of ISE are you running, along with patch?

In the domain box, are you using the remote domain or local domain?

Jatin Katyal
- Do rate helpful posts -

[steelinquisitor]

Hello Jatin,

Thanks for the reply.  I have ISE v1.1.1. I think I have fixed it. It was the DNS issue.  I added the ISE server to my AD/DNS and rebooted the ISE server. After it rebooted, I tried to retrieve the groups and attributes, and it worked.

[Jatin Katyal]

Good to know. Thanks for keep the thread updated.

Jatin Katyal
- Do rate helpful posts -

[steelinquisitor]

Thanks again.  Hope this post help others with the same issue.

[steelinquisitor]

I am sorry Jatin. I have another question.  I am working on Motorola RFS7000 WLC and Cisco ISE v1.1.1.

I am not sure if I should create a new thread about the new issue I am having now.  I have successfully added my RFS controller and one AP7131 to ISE Network Devices. And I am able to login to these devices using my AD account. However, it is not allowing me to manage these devices.  I believe I am at exec mode. I SSH to my RFS and I can't even get to enable mode.