We recently noticed that our LDAP import of AD groups is missing a small subset of groups. These groups appear in OU's where there are groups that are getting pulled in which is even more perplexing. Our OU LDAP definition is very simple. There is nothing for RDN and the filter we have tried is (objectCategory=group) as well as (objectClass=group). In both cases we are missing about 300-400 groups. When I remove either filter they come across but so does a lot of data I don't want.
The record has the following attributes so it should work. Is there something I am missing with the filter?
The Ldap browser finds the groups so why doesn't the data source?
