Jack_Podmore Posted March 14, 2020 Posted March 14, 2020 Hi guys, For some reason our LDAP import setup has stopped creating new user accounts. No changes have been made to our setup that we are aware of. Existing users attributes are updating normally without issue - does anyone have any ideas!? This started happening around the 1st March. Thanks in advanced!
Steve Giller Posted March 16, 2020 Posted March 16, 2020 Hi @Jack_Podmore Is there anything in the log file that indicates an error? There are a lot of things that could change, the configuration itself, a Windows Update, the account it runs under expiring or having its rights changed etc. Are you running the latest version of the LDAP Import Tool (currently v3.6.0)?
Jack_Podmore Posted March 16, 2020 Author Posted March 16, 2020 Hi @Steve Giller Thanks for replying on this. There is nothing in the logs from what we can see (attached with API key removed). The configuration hasn't been touched within Hornbill and nothing has changed with the user account that runs this. We have updated the LDAP Import Tool as our first try at resolving this but with no luck. What is odd is that existing accounts are being updated without issue it just wont import any new ones. Thanks, Jack LDAP_User_Import_2018-09-24T13-02-36+01-00.log
Steve Giller Posted March 16, 2020 Posted March 16, 2020 @Jack_Podmore The timestamps on that log are from 2018 - I'm not sure they're the ones we need! Having said that, if the config hasn't changed that much the line 'Loading Configuration Data: ldapupdateexistingusers' suggests that you may have separate 'update' and 'create' configs. Checking this would be my suggested first step.
Jack_Podmore Posted March 16, 2020 Author Posted March 16, 2020 Hi @Steve Giller Sorry about that, I filtered wrongly on "date modified"! I have checked over our configuration and we only have 1 "Data Import Configuration" setup which has always worked without issue. Could this be to do with the "LDAP Hardening" Microsoft have introduced? Thanks, Jack LDAP_User_Import_2020-03-16T16-52-37Z.log
Steve Giller Posted March 16, 2020 Posted March 16, 2020 @Jack_Podmore Short answer - yes, it could, however there are no indications in the log that confirm this. Can you increase your Log Level (on the configuration's Advanced Options tab) to Debug, and send me the new log via PM, please?
Steve Giller Posted March 18, 2020 Posted March 18, 2020 In case other customers have a similar issue, the cause was an AD group that the import's LDAP filter used being moved without letting the Hornbill Admins know, meaning that any Users in that group were no longer picked up.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now