Issue Summary

The customer is importing data from the Microsoft Active Directory group. When the member attribute in the group is more than 1500, the value is set to null. Whereas values less than 1500 are working without any issues.

Per Microsoft Documentation: https://docs.microsoft.com/en-gb/previous-versions/windows/desktop/ldap/searching-using-range-retrieval?redirectedfrom=MSDN , the range is introduced by the Active Directory server which is causing the issue.

Currently, Assets import doesn't support pagination due to which the values are set to null if the group is having more than 1500.

This is reproducible on Data Center: Yes

Steps to Reproduce

1. Configure Assets Import with Active Directory
2. In the Active Directory, Create groups with member attribute having more than 1500 values
3. Try to synchronize and check the member attribute value in Assets.

Expected Results

Member attribute in the respective Assets Object should have all the values available in Active Directory

Actual Results

Member attribute in the respective Assets Object doesn't have any values.

The below exception is thrown in the xxxxxxx.log file:

CN=GG-MFA-ENF-CONWW1,OU=Groups,DC=corp,DC=oftest,DC=it, whenchanged=whenChanged: 20230324103356.0Z, whencreated=whenCreated: 20230324102640.0Z, objectguid=objectGUID: [B@7e8bc4bd, usnchanged=uSNChanged: 81643, usncreated=uSNCreated: 56154, objectsid=objectSid: [B@80f070f, member;range=0-1499=member;range=0-1499: 

Workaround

Currently, there is no known workaround for this behavior. A workaround will be added here when available