Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents
file_download PDF
{ "lLangCode": "en", "lName": "English", "lCountryCode": "us", "transcode": "en_US" }
English
keyboard_arrow_right

show services user-identification active-directory-access user-group-mapping

date_range 19-Nov-23

Syntax

content_copy zoom_out_map
show services user-identification active-directory-access user-group-mapping 
(group name | status | user name) domain name

Description

Display user-to-group mapping information used in the integrated user firewall feature. Note that the LDAP server is often part of the domain controller.

Options

  • group group-name—Display the users mapped to the specified group.

  • status—Display the status of the last query to the LDAP server for user-group mapping.

  • user name—Display the groups for the specified username.

  • domain name—(Optional) Display the group, status, or user information for the specified domain.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show services user-identification active-directory-access user-group-mapping group command.

Table 1: show services user-identification active-directory-access user-group-mapping group Output Fields

Field Name

Field Description

Domain

Domain of the specified group.

Users

Usernames mapped to the specified group.

Table 2 lists the output fields for the show services user-identification active-directory-access user-group-mapping status command.

Table 2: show services user-identification active-directory-access user-group-mapping status Output Fields

Field Name

Field Description

Domain

Domain for which the status is displayed.

LDAP server

IP address of the LDAP server.

Port

Port number on the LDAP server.

Last-query-status

Status of the last query from the SRX Series Firewall.

Last-query-time

Year-month-date:hour:minutes:seconds when the SRX Series Firewall last queried the LDAP server.

Table 3 lists the output fields for the show services user-identification active-directory-access user-group-mapping user command.

Table 3: show services user-identification active-directory-access user-group-mapping user Output Fields

Field Name

Field Description

Domain controller

Domain controller about which the user information is displayed.

Groups

Groups to which the user belongs.

Referenced by policy

Groups to which the user belongs and that are referenced by a firewall policy.

Sample Output

show services user-identification active-directory-access user-group-mapping group domain

content_copy zoom_out_map
user@host> show services user-identification active-directory-access user-group-mapping group finance domain www.apac-acme.net
show services user-identification active-directory-access user-group-mapping group finance-group
Domain: example-domain.net
Users: user1, user2
Domain: example2.domain.net
Users: user3

Sample Output

show services user-identification active-directory-access user-group-mapping status

content_copy zoom_out_map
user@host> show services user-identification active-directory-access user-group-mapping status
Domain: example-domain.net
LDAP server   Port      Last-query-status    Last-query-time
192.0.2.87     389       Query success        2014-02-07:15:50:52

Domain: example2.domain.net
LDAP server   Port      Last-query-status    Last-query-time
192.0.2.144    389       Idle                0

Sample Output

show services user-identification active-directory-access user-group-mapping user

content_copy zoom_out_map
user@host> show services user-identification active-directory-access user-group-mapping user user1
Domain example-domain.net
Groups: Dev, NAT, SBU
Referenced by policy: SBU

Domain: example2.domain.net
Groups: HR, USA

Release Information

Command introduced in Junos OS Release 12.1X47-D10.

footer-navigation