PEP not showing user groups

[tomasFuk]

Hello,

i have working PDP -> PEP identities sharing. 

On PDP gateway i can see user with all required info including groups:

************************************************************************************
Session:  dcacec19
Session UUID:  {74CBE119-8E85-7D09-71EC-90BA29F3FA00}
Ip:  10.1.12.20
Machine:
 alfa01@ipftest.local {1e7c2749}
   Groups: All Machines
   Roles: -
   Client Type: Identity Collector (Active Directory)
   Authentication Method: Trust
   Distinguished Name: CN=ALFA01,OU=Domain Controllers,DC=IPFtest,DC=local
   Connect Time: Sun Jun 30 01:23:12 2024
   Next Reauthentication: Sun Jun 30 13:23:42 2024
   Next Connectivity Check: -
   Next Ldap Fetch: Sun Jun 30 08:49:40 2024

Users:
 checkpoint_user@ipftest.local {b58917bd}
   LogUsername: checkpoint user (checkpoint_user)
   Groups: All Users
   Roles: -
   Client Type: Identity Collector (Active Directory)
   Authentication Method: Trust
   Distinguished Name: CN=checkpoint user,OU=IPF_Users,OU=IPF,DC=IPFtest,DC=local
   Connect Time: Sun Jun 30 01:23:12 2024
   Next Reauthentication: Sun Jun 30 13:23:42 2024
   Next Connectivity Check: -
   Next Ldap Fetch: Sun Jun 30 08:04:36 2024

Packet Tagging Status:  Not Active
Published Gateways:  10.1.12.20,Local
************************************************************************************

but on pep gateway i cannot see user groups:

[Expert@cp-2:0]# pep show user query usr checkpoint_user
Command: root->show->user->query


PDP: <10.1.12.10, 00000000>; UID: <dcacec19>
==================================================
  Client ID          : <10.1.12.20, 00000000>
  Authentication Key : <Unavailable>
  Brute force counter: 0
  Username           : checkpoint_user
  Log Username       : checkpoint user (checkpoint_user)

  Machine name       : alfa01
  User groups        : <Unavailable>
  Machine groups     : <Unavailable>
  Compliance         : <Unavailable>
  Identity Role      : <>
  Time to live       : 43230
  Cached time        : 86400
  TTL counter        : 43170
  Time left          : 27777
  Client type        : Identity Collector
  Last update time   : Sun Jun 30 10:23:12 2024

Am i missing some configuration to see them? Thanks!

[PhoneBoy · Accepted solution]

I don't see any groups in the PDP output either, only "All Users" and no roles.
And the machine identity appears to be propagated to the PEP gateway (alfa01).
I assume this is operating as expected.