Duplicate Users in LDAP

[amacqueen]

We've been having this issue for some time and I haven't been able to get round to checking until this week. The problem is we have multiple user records being created from our LDAP import.

For example see below:-

A record seems to be created with an email address and another without the email address.

Any initial thoughts? If it would help I'm happy to post our config.

Thanks for looking.

[ohhgr]

Hi Angus,

This sounds basic, but still cross-check the transform scripts once and make sure there are no "insert()" function calls, in place of say "update()" calls.

Thanks,
Mandar

[amacqueen]

Thanks Mandar. I think I may have resolved it myself. In our LDAP OU Definition I had a filter as follows:-

(&(objectClass=person)(sn=*)(!(objectClass=computer)))

I amended this in Dev to:-

(&(objectClass=person)(sn=*))

Deleted some users and re-ran the scheduled load and the duplicate entries did not re-appear. I'm assuming the statement I deleted was creating another record.

Going to keep my eye on it for a day or two in Dev before I put it live though

[ohhgr]

Hi Angus,

It's good that the issue hasn't occurred again. However, i'm not sure that removing a condition (!objectClass=computer) might be the reason for that.

Above condtion specifies that objects with Class computer should not be pulled. More details for the filters could be found on google. here's one http://social.technet.microsoft.com/wiki/contents/articles/5392.active-directory-ldap-syntax-filters...

Thanks,
Mandar

[amacqueen]

Thanks Mandar, looks like it might be back to the 'drawing board'. But what a brilliant resource the URL is