topic Re: LDAP sync with AD in Application Development and Automation Discussions

LDAP sync with AD

Former Member — Fri, 17 Aug 2007 18:24:59 GMT

Is it possible to sync data with users in a group?

Our AD structure separates users by their location, so it's quite a bit of work setting this up to sync. We do have a group setup which contains all or our SAP users.

In this example SAP USERS is a group.

CN=John Doe,OU=SAP USERS,OU=Security and Distribution,OU=Groups,DC=d1c

Transaction LDAP fails to find record for John Doe, so I have to use

CN=John Doe,OU=Users, OU=Texas,DC=d1c

Any help is appreciated.

Re: LDAP sync with AD

Former Member — Fri, 17 Aug 2007 19:55:54 GMT

I think I know what you're problem may be.. There is a hard limit or 1000 results for a LDAP search against active directory. And I think you're hitting this limit. One way to test is to narrow your search to one small OU with only 10 users in the OU.

This setting can be changed at the controller and is called "MaxValRange". here's a link to more info http://support.microsoft.com/kb/315071

Before you make this change on your domain controller I'd try narrowing the search to a single OU first.

Re: LDAP sync with AD

Former Member — Tue, 21 Aug 2007 18:53:35 GMT

No.

I'm trying to use a User Group to serve as base entry in transaction LDAP.

I guess SAP expects the base to always be a OU.