Cisco WSA S170 AsynOS 7.5.2 LDAP group query debug

[Alexander Dobritsky]

Dear support forum members,

     I have some problems with the Cisco WSA S170 (AsynOS 7.5.2). It looks like a bug. I have two users in my Active Directory(AD), both of them are members of the InternetGrp6 AD group, both of them are in the same organization unit in the AD tree, but WSA could not identify that one of them member of the InternetGrp6.

     I understand that WSA do this over the LDAP query to AD controller, but I could not found the way how do I debug LDAP query. This will give me ability to find out what happened during the user group LDAP query.

Thanks in advance!

Best regards,

Alexander.

P.S. Sorry for my English.

[kushsriva]

Hi,

You can run the command "testauthconfig" from the CLI and check for any errors.

For further testing you might have to go to TAC.

Regards,

Kush

[Alexander Dobritsky]

Hi,

First of all I would like to thank you for assistance!

It is a pity, but I received  "Unknown command: ldapsearch" in the SSH CLI session.

AsyncOS 7.5.2 for Web build 304 installed.

Best regards,

Alexander.