This message was deleted.
# citrix-netscalers
Slackbot
11/25/2019, 5:23 PMThis message was deleted.
m
Mads Petersen
11/25/2019, 7:59 PMHi,
Are the users directly member of that group or are you using nested group, and whats the level of the nested group?
r
Ryan Chaney
11/25/2019, 8:16 PMNo, there is no nested grouping (at least not in this group) and nested group extraction is NOT enabled on the LDAP request...
Ryan Chaney
11/25/2019, 8:16 PMIts only a pilot, so there are only a handful (30 or so) users.
m
Mads Petersen
11/25/2019, 8:19 PMYou could maybe try to change the memberOf to another attribute, the ADC have had issues when an user is a memberof a lot of groups.
r
Ryan Chaney
11/25/2019, 8:29 PMYea, I saw where that had been an issue, and may try that, but I verified that the users who are having the issue are actually in far fewer groups than some of the users (myself included) that it is working for.
m
Mads Petersen
11/25/2019, 8:30 PMHave you looked in aaad.debug while a working and non-working user logs on?
r
Ryan Chaney
11/25/2019, 8:32 PMyea, it logs receive_ldap_user_search_event 1-606: User 'username' not found on the LDAP server
Ryan Chaney
11/25/2019, 8:32 PMand in ADM, it lists it as the same, "user not found"
m
Mads Petersen
11/25/2019, 8:36 PMJust to be sure, the users gets it already on at the /manageotp right and not after he/she enrolled the device?
r
Ryan Chaney
11/25/2019, 8:50 PMyes, this is on the 2 factor auth page to get into the /manageotp page.
Ryan Chaney
11/25/2019, 8:54 PMim sorry.. single factor, just username and password... too many chats at once, lol