it is not possible to directly request information about groups and Active Directory

[Aleksey139180]

Good afternoon.
Check point equipment
26000 TURBO Package CPAP-SG26000-TURBO-RUS-LP 26000 Appliances
The problem is, when creating a new role, it is not possible to directly request information about groups and Active Directory.
Previously, SK174912 helped https://support.checkpoint.com/results/sk/sk174912
In recent versions, SmartConsole has stopped working.
Stopped working immediately after the update
LDAP integration+SSL certificates are not expired, because if you manually select them in the LDAP tree, everything works successfully, it is the quick search from the root that does not work.

I ask for help, how can I solve this problem?

[PhoneBoy]

You said "recent" versions but did not specify the actual versions involved (version/JHF it worked, the version you upgraded to that didn't).
Are you seeing the same error message in the dialog as in the SK?

[Aleksey139180]

Nothing new was installed on the gateways or the management server; only the console itself was updated.

Currently at version 675

It was version 671.

full versions attached.

It's the quick search that doesn't work. If you turn on the navigation bar and find the right department in the catalog tree, everything will work fine.

[PhoneBoy]

@Tal_Paz-Fridman can you investigate this?

[Tal_Paz-Fridman]

I found a few similar tickets. In some cases, such as Smart-1 Cloud, the issue required enabling the “Use gateway as a proxy” option.

In other cases, it required updating the LDAP AU object to point to the correct server.

I think this will require opening a ticket with TAC.

Thanks.

[ccsjnw]

Are you using the Identity Collector to get information from AD about your user logins?
I think you’ll need to provide some more information about exactly what isn’t working.