-
Bug
-
Resolution: Cannot Reproduce
-
Low
-
None
-
5.4.3
-
1
-
Severity 2 - Major
-
2
-
Issue Summary
The customer is importing data from the Microsoft Active Directory group. When the member attribute in the group is more than 1500, the value is set to null. Whereas values less than 1500 are working without any issues.
Per Microsoft Documentation: https://docs.microsoft.com/en-gb/previous-versions/windows/desktop/ldap/searching-using-range-retrieval?redirectedfrom=MSDN , the range is introduced by the Active Directory server which is causing the issue.
Currently, Assets import doesn't support pagination due to which the values are set to null if the group is having more than 1500.
This is reproducible on Data Center: Yes
Steps to Reproduce
- Configure Assets Import with Active Directory
- In the Active Directory, Create groups with member attribute having more than 1500 values
- Try to synchronize and check the member attribute value in Assets.
Expected Results
Member attribute in the respective Assets Object should have all the values available in Active Directory
Actual Results
Member attribute in the respective Assets Object doesn't have any values.
The below exception is thrown in the xxxxxxx.log file:
CN=GG-MFA-ENF-CONWW1,OU=Groups,DC=corp,DC=oftest,DC=it, whenchanged=whenChanged: 20230324103356.0Z, whencreated=whenCreated: 20230324102640.0Z, objectguid=objectGUID: [B@7e8bc4bd, usnchanged=uSNChanged: 81643, usncreated=uSNCreated: 56154, objectsid=objectSid: [B@80f070f, member;range=0-1499=member;range=0-1499:
Workaround
Currently, there is no known workaround for this behavior. A workaround will be added here when available
| Form Name | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|