IBM Support

IBM Security Guardium - Global group members under a domain local group are not found by accessmgr ldap user import, even with "sub-tree" search on

Troubleshooting


Problem

I have a following Active Directory LDAP structure and I am trying to import LDAP users via accessmgr LDAP User Import :
image
I also have "sub-tree" selected in the LDAP user import configuration, however, LDAP import does not import users that are part of Global Groups within the domain local.

Symptom

1. GUI > accessmgr login > LDAP User Import > Run Once now
2. You notice that only User1 which is a part of local group is imported.
3. Users from global groups EU and AMER aren't imported. 

Document Location

Worldwide

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSMPHH","label":"IBM Security Guardium"},"Component":"","Platform":[{"code":"PF016","label":"Linux"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB76","label":"Data Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
11 February 2019

UID

ibm10871312