Clarity: Only 1000 users are found by the LDAP Add/Modify New and Changed User's job when a search filter is used.

Document ID : KB000051723
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

LDAP Add/Modify New and Changed Users job only finds 1000 users when a search filter is specified in the NSA instead of a group.

STEPS TO REPRODUCE:

  1. Set up Clarity to run with and LDAP and Active Directory. Use a search filter that should pull back more than 1000 users, not a group.

  2. Run the LDAP Add/Modify New and Changed Users job.

EXPECTED RESULTS: All users found by the search filter should be imported into Clarity (or found in the ldapsynch files)

ACTUAL RESULTS: Only 1000 users are added to the ldapsynch files

Solution:

WORKAROUND:

  1. Use an LDAP Group.

  2. Find a set of search filters that will pull all desired users in groups of 1000 or less. For example: Employee type with values permanent, temporary, contract. Then construct a search filter that imports the permanent employees and run the synch job. Repeat this with each value until all users are imported into Clarity. Then revert to the original search filter since running this job for maintenance should import less than 1000 users at a time.

STATUS/RESOLUTION:

This issue has been documented as CLRT-24673 and is resolved in Clarity 8.1.4, Clarity 8.1.5, and Clarity 12.0.2 and above.

Keywords: CLARITYKB, CLRT-24673, LDAP, synch job, clarity8resolved, clarity12resolved, clarity1202resolved, clarity814resolved.