LDAP Group Import pulling in Users instead of Groups / LDAP Users Import pulling in Groups instead of Users - Support and Troubleshooting

LDAP Group Import pulling in Users instead of Groups / LDAP Users Import pulling in Groups instead of Users Issue .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } }  A Group or User LDAP import may not populate the correct data into the respective import set tables, e.g. a Group import imports User data or a User import imports Group data to the import set table.

The LDAP OUs all look correct and the data source setup looks correct, but the instance ends up with the wrong data in the import set table defined in the data source.

For example if using a MID Server with the LDAP, after the Group import you may see the User OU filter being applied when the MID Server has the property glide.ldap.debug=true in the agent log:

07/03/18 13:41:30 (669) Worker-Standard:LDAPProbe Worker starting: LDAPProbe source: 1f03694edb03d30079ba5eea4b961966&#13; 07/03/18 13:41:31 (684) Worker-Standard:LDAPProbe LDAP API - LDAPLogger : LDAP Processing RDN OU=Domain Users and range &#13; 07/03/18 13:41:31 (684) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAP : Requesting attributes : null&#13; 07/03/18 13:41:31 (684) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAP : Getting results from LDAP server ..&#13; 07/03/18 13:41:31 (700) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAP : Using RDN : OU=Domain Users,DC=SNC,DC=local and search filter : (&amp;(objectClass=person)(sn=*)(!(objectClass=computer)))&#13; 07/03/18 13:41:31 (700) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAP : LDAP paging enabled with 1000 on a page&#13; 07/03/18 13:41:31 (700) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAP : Using filter : (&amp;(objectClass=person)(sn=*)(!(objectClass=computer)))&#13; 07/03/18 13:41:32 (184) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAP : Received results from LDAP server &#13; 07/03/18 13:41:32 (184) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAPLogger : Recieved LDAP record from server with DN: CN=User\, User,OU=Domain Users,DC=usr,DC=local&#13; 07/03/18 13:41:32 (184) Worker-Standard:LDAPProbe DEBUG: LDAP API - LDAPLogger : Recieved LDAP record from server with DN: CN=User\, User,OU=Domain Users,DC=usr,DC=local&#13;

It is expected for the above logging to show the Group OU filter instead, since you are doing a Group import.

Release .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } All releases

Cause .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } There is a Read ACL on the sys_data_source.* table and the mid server user (or the user running the import if a mid server is not used) does not have the needed Role to have that ACL provide access.

You can see if this is the case by impersonating the importing user in the UI and going to the list view of sys_data_source, if you see x number of rows, but no data in any of those rows this is the cause of the issue.

Resolution .ns-kb-css-body-editor-container { p { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } span { font-size: 12pt; font-family: Lato; color: var(--now-color--text-primary, #000000); } h2 { font-size: 24pt; font-family: Lato; color: var(--now-color--text-primary, black); } h3 { font-size: 18pt; font-family: Lato; color: var(--now-color--text-primary, black); } h4 { font-size: 14pt; font-family: Lato; color: var(--now-color--text-primary, black); } a { font-size: 12pt; font-family: Lato; color: var(--now-color--link-primary, #00718F); } a:hover { font-size: 12pt; color: var(--now-color--link-primary, #024F69); } a:target { font-size: 12pt; color: var(--now-color--link-primary, #032D42); } a:visited { font-size: 12pt; color: var(--now-color--link-primary, #00718f); } ul { font-size: 12pt; font-family: Lato; } li { font-size: 12pt; font-family: Lato; } img { display: ; max-width: ; width: ; height: ; } } Add the ACL required role to the user doing the import, or create a new Read ACL on sys_data_source.* that has a Role possessed by the importing user.