Forum Discussion

F5_Jeff's avatar
F5_Jeff
Icon for Cirrus rankCirrus
Nov 17, 2017

Unable to import AD Groups

hey everyone!

 

we are having problems with importing the AD groups. It displays error "unable to import groups".

 

we are able to have the authentication verified. we can query successfully to the AD.

 

we used a service account in creating the AD. is this a factor why we cant import the groups? also, there is an error displaying

 

" AccessPolicyProcessor/MasterKeyMgr.cpp func: "resetMasterKey()" line: 142 Msg: new Master Key has been updated"

 

what does this error mean? this error displays when we try to update the AD groups using the GUI

 

ad
ad groups
apm logs
BIG-IP Access Policy Manager (APM)
LTM
security
  • MD_'s avatar
    MD_
    Icon for Nimbostratus rankNimbostratus
    Feb 22, 2018

    Hi,

     

    I have the same problem. Did you find a solution please ?

     

    Thank you

     

  • José_Daniel's avatar
    José_Daniel
    Icon for Nimbostratus rankNimbostratus
    Jan 03, 2020

    Hi,

     

    I had the same problem and the solution was not related to the registration line.

     

    The problem was more than 5 minutes apart between the ad specified in the AAA object and the big-ip with APM.

     

    You must check the clock on both devices and verify that they have no more than 5 minutes difference between them.

     

    After resolving this difference, the big-ip device can now obtain information from AD like groups and users.

     

    I hope this can help you.