[IAG] Error message when editing domain users in new Internet access policy
Problem Description
Error message when editing domain user in new Internet access policy
Warning Information
9.png (283.45 KB)
9
Process——
- First, confirm whether all policies have such an error when editing domain users. After testing, it is found that some users can be displayed normally, and some have the same error prompt
- After checking all the Internet policies, I found that the policy administrators of most policies are different, as shown in the following figure
11.png (355.44 KB)
11 - The policy administrator user of the policy that currently has an error in editing the domain user is sunjl, but the user name for logging into the device is hecz; therefore, it is inferred that the inconsistency of the user causes the inability to edit.
- Analysis shows that the corresponding domain user cannot be edited. It is inferred that the corresponding domain user organizational structure was synchronized using the sunjl user before, and the hecz user does not have the permission to edit it; the username verification failed, resulting in an error.
- Check the user sunjl and find that it has been deleted by the administrator admin. After adding sunjl to the administrator user and granting administrator privileges, use sunjl to log in to the device again to edit the domain users under the corresponding policy normally (Note: Through testing, it is also impossible to edit by using the administrator user admin to log in to the device. It is inferred that this is distinguished by verifying the user name)
Root cause
The user hecz who logged in to the device was not the user who created the synchronization domain server and created the policy. It was previously created by the user sunjl
solution
Log in to the device again and edit the operation by creating a new administrator user sunjl
Original Link
https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=7258&isOpen=true