Commit Error: Not A Valid Server Profile
Resolution
Issue
When attempting to commit on a Palo Alto Networks device, the operation fails with the following error:
vsys-->vsys1-->"Ldap" is not a valid server profile.
Note: For this document, "Ldap" serves as an example LDAP server profile name.
In the management server log (ms.log), messages appear that are similar to the following:
Jul 16 17:09:00 Error: pan_schema_verify_set_constraints(pan_schema_verify.c:222): 'Ldap' is not a valid reference near line 0
Jul 16 17:09:00 Error: pan_cfg_engine_execute_request(pan_cfg_engine.c:2050): processing command edit failed
Jul 16 17:09:00 Error: pan_cfg_mgr_handle_local_request(pan_cfg_mgr.c:14691): The following request could not be handled:
<request cmd='edit' cookie='0491589290311157' obj="/config/devices/entry[@name='localhost.localdomain']/vsys/entry[@name='vsys1']/group-mapping/entry[@name='pantac03']"><entry name="pantac03
"><user-object><member>person</member></user-object><user-name><member>sAMAccountName</member></user-name><disabled>no</disabled><server-profile>Ldap</server-profile><group-include-list>
<member>cn=domain controllers,cn=users,DC=pantac03,DC=com</member></group-include-list></entry></request>
Resolution
- Delete and re-add the LDAP server profile.
- If the error still occurs, restart the management server with the following command:
> debug software restart management-server
owner: pvemuri