User failed to login to firewall for one user

Bill,

can you check what the first membership group where the user belong? Is it different from the others?

You can check this settings inside AD Users and Computers.

Thanks

Hey Luk,

User is in the same OU as all the others and the same group.  When the XG imports him it does place him in the correct group on the firewall as well.  I'm really stumped. 

Thanks Bill.

Anything useful from AD Security events?

Anything useful from /var/tslog/access_server.log ?

Thanks

Potentially something in the access_server.log:

XG210_WP02_SFOS 16.05.3 MR-3# tail -f /var/tslog/access_server.log
ERROR     May 03 13:40:22 [4131375936]: config_resolve_bwid: BW Policy 0 not found
ERROR     May 03 13:40:22 [4140821312]: sqlite_db_exec_query_with_res: query failed: 1, 'near "Annecy": syntax error'
ERROR     May 03 13:40:22 [4140821312]: sqlite_db_handle_request: query execution failed
ERROR     May 03 13:40:22 [4144871232]: handle_liveuser_insert: SQLITE_REQ_INSERT_LIVEUSER query failed

The user originally had an ' in his username which I suspected was causing the problem so I removed it, but it seems like it is still seeing it?  The ' is no longer showing up in the STAS live users. 

Hi Bill, 

This issue is identified as a bug and will be resolved in 16.05 MR5. Bug ID NC-14462

Thanks for confirming.  I was able to resolve it by also removing the ' (apostrophe) from their displayName LDAP attribute as well.  Obviously it should be able to handle it, but this will work around for now.  Thanks.