LDAP group members not importing

[rickseidencdi]

Hello all.

I have what I believe is a common problem, but the common solutions aren't working.   Simply put, we import LDAP users, and then LDAP groups, and the group membership is not populated.

Build information from our instance:

        Build name: Jakarta

        Build date: 09-05-2017_1648

        Build tag: glide-jakarta-05-03-2017__patch3-08-23-2017

On the LDAP User import table, I expanded the u_memberof field to 4000, and the u_source field to 255.

On the LDAP Group import table, I expanded the u_members field to 4000 to get all the users in the groups, and I expanded the u_source field to 255.

My transform maps are not the out of the box transform maps, but I followed them as closely as possible.   For both the user and the group mappings, I copied and pasted the scripts in the transform and the onStart/onAfter scripts exactly from the out of the box ones (although our LDAP doesn't have managers so the onStart/onAfter for the managers information is marked Active=false).   I am mapping u_source to source on both group and user.

I even checked that the information in the u_members field in the group import contains actual users that are in our Users table with the correct source information.

I just don't know what else to check, or what else I'm missing.

Any help would be greatly appreciated.

Thank you!

Rick

[gtk]

can you please provide onStart and onAfter script

we are facing problem while importing group members, it will be helpful for us

[rickseidencdi]

SURE!

onStart:

gs.include("LDAPUtils");

var ldapUtils = new LDAPUtils();

ldapUtils.setLog(log);

onAfter:

// After a group has been inserted the line of code below will get

// all the users that belong to the group according to LDAP and

// put the users into this group.   This is done by getting

// the value from the u_members field from the source record.

// If you do not want to put the users in the group then you

// can comment out or remove the line below.   If you are using

// something other than Active Directory and user membership is

// not indicated via the 'member' attribute then you can add the

// following line to indicate what field should be used.   This

// line would be added before the the call to addMembers.

//

//   ldapUtils.setMemberField('u_yourAttributeNameGoesHere');

//

ldapUtils.addMembers(source, target);

[bburdick]

Just want to say thank you for this post.  This was my same issue.  Tried to follow best practice as you noted.  Updated my code and "BOOM" it all was working.  Thanks for providing this information.

[gtk]

rickseidencdi

can you please share transform scripts for both groups and group members

we have the similar issue

actually, our requirement is to get groups from an AD and pass information to a custom table (for groups) and group members into another custom table(for group members)

so we created a data source and two transform maps one for transforming groups and other for transforming group members

after importing and run transform we found that all groups are in groups table and group members table is having one user for one group

-> verified with import set table   u_member field length has set to 4000 and source field set to 255 and in imported data having all members from AD but not loaded into group member table

[rickseidencdi]

can you please share transform scripts for both groups and group members

Sure:

onStart:

gs.include("LDAPUtils");

var ldapUtils = new LDAPUtils();

ldapUtils.setLog(log);

onAfter:

ldapUtils.addMembers(source, target);

I'm not sure this will work for you, as it's designed to add the members to the groups, and you mentioned you're trying to get them into a custom table.   But you may be able to copy/extend ldapUtils to point to your custom table.

Good luck!