Issue Panorama and templates

[BigPalo]

I'm having a problem configuring GP with an authentication profile (LDAP). We have two templates, one for the GP configuration and another for LDAP GroupMapping (and a template stack with booth templates. So when I enter the LDAP GroupMapping configuration in the same GP template, authentication works correctly, but if I put the configurations in separate templates, authentication doesn't work.
Why is this happening?

The GP and LDAP configurations must be in the same template for proper authentication?

[TomYoung]

Hi @BigPalo ,

You can configure GP and LDAP in different templates.  You will have to configure the template stack for options where the 2 templates need parameters from each other.  In the template configuration, you should not be able to see the other template configuration.

Thanks,

Tom  

[BigPalo]

Hi Tom,

Many thanks for your response. I dont know where i should configure this: "You will have to configure the template stack for options where the 2 templates need parameters from each other". Where and what option do this? i have the template-stack with both templates like this:

[TomYoung]

Hi @BigPalo ,

Great screen shots!  When you configure GlobalProtect under the Network tab, in the Template drop down select the FW-PA-VPN1-stack1.

https://www.youtube.com/watch?v=2Fjjt2J7uNM

Thanks,

Tom

[BigPalo]

Thanks Tom for your help. Im starting to think that i can not mix two differents LDAP_GROUP_MAPPING groups in the same template Network_GP tab. 

Template for GP is VPN but inside GP we want to use another template for LDAP autentication in GP

This is the config for testing purpose.

Fist client setting is the test using LDAP_Group in common template which is not working for authentication:

Second client setting is which is working:

[BigPalo]

So looking in the image i added. Is it possible to have two diferents lines in the same agent setting pointing to diferents GroupMapping in diferent template?