LDAP mapping function modules

[matt]

I've got a working mapping defined like this:

The function module Z_MAP_LOGONCLASS has the usual interface. In it I read the assigned roles, and any user with a certain role is given the class SUPER, otherwise they get the default class. To get the roles I read from table ATTRIBUTES_LDAP  where name = 'SAPROLES'.

This all works fine: when I run the synchronisation program users are assigned to the user group/class that goes with their assigned roles.

Now the problem. I want to do something similar, to set the users timezone on SAP from the supplied company in ldap. So I defined it like this:

In the function module Z_MAP_TIMEZONE, I try to read SAPCOMPANYKEY from ATTRIBUTES_LDAP - but there is no such entry, so my derivation fails.

I get the feeling I've missed something basic. Can you give me any hints?

[matt]

And the answer is that SAPCOMPANYKEY is not filled in AD, so LDAP doesn't pick it up. When I used a user that has that field maintained, it worked fine.