Author Topic: Group membership not adding user during synchronization with LDAP  (Read 1412 times)

Andreas Baaserud Hauge

  • Jr. Member
  • **
  • Posts: 48
    • View Profile
Re: Group membership not adding user during synchronization with LDAP
« Reply #15 on: November 10, 2022, 07:43:06 AM »
In the tracelog, I notide that the garbage character is always on character number 206

Is there a limit for how long the Distinguished Name can be?
It looks like the query is taking the value from a field u_dn
ABH

rjrussel

  • Full Member
  • ***
  • Posts: 141
    • View Profile
Re: Group membership not adding user during synchronization with LDAP
« Reply #16 on: November 10, 2022, 07:52:51 AM »
Can you upgrade to the latest fixpack for your release and try again?

Andreas Baaserud Hauge

  • Jr. Member
  • **
  • Posts: 48
    • View Profile
Re: Group membership not adding user during synchronization with LDAP
« Reply #17 on: November 15, 2022, 06:41:39 AM »
Upgrading from CMOD 10.1.0.5 to 10.1.0.11 seems to have fixed the issue where group members where not added to the group
Instead of existing group members being removed from the group, they now are left in the group.
Code: [Select]
2022-11-15 14:36:07.340313: ARS1225I Group Member Exists: Name >Group456<  Userid >User123<
Also group members are being added to groups
Code: [Select]
2022-11-15 14:36:07.340818: ARS1222I Group Member Add Preview: Name >Group456<  Userid >User789<
PS: I noticed, you need to run ARSLSYNC twice if the group you are synchronizing does not already exist in OD.
First run of ARSLSYNC will create the group
Second run of ARSLSYNC will add users to that group.

Thanks for you help rjrussel!
« Last Edit: November 15, 2022, 07:22:57 AM by Andreas Baaserud Hauge »
ABH

rjrussel

  • Full Member
  • ***
  • Posts: 141
    • View Profile
Re: Group membership not adding user during synchronization with LDAP
« Reply #18 on: November 15, 2022, 06:59:43 AM »
I wish I could remember exactly, but I think we extended the length of the GROUP DN earlier on with ARSLSYNC. Which is why upgrading worked.

"PS: I noticed, you need to run ARSLOAD twice if the group you are synchronizing does not already exist in OD." - I think you mean ARSLSYNC here.

As much as I want to pretend I didn't read this :) .... That doesn't make any sense. ARSLYNC should create the users and populate them in a single run.