[lsc-users] AD - Filtering OU

[Lior Dotan]

Hi All,

In my AD, all the users and groups that I want to sync are in
OU=test,DC=example,DC=com.
However some of the groups have users in another OU
(OU=test2,DC=example,DC=com) that I don't want to sync.
When I try to sync the group memberships I get errors for those users
and the sync fails:
javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D:
NameErr: DSID-03100241, problem 2001 (NO_OBJECT)

My question is, is there a way to filter out the users from the second
OU and only sync group memberships for users in the first OU?

TIA,
Lior
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
lsc-***@lists.lsc-project.org
https://lists.lsc-project.org/cgi-bin/mailman/listinfo/ls

[Clément OUDOT]

Post by Lior Dotan
Hi All,
In my AD, all the users and groups that I want to sync are in
OU=test,DC=example,DC=com.
However some of the groups have users in another OU
(OU=test2,DC=example,DC=com) that I don't want to sync.
When I try to sync the group memberships I get errors for those users
NameErr: DSID-03100241, problem 2001 (NO_OBJECT)
My question is, is there a way to filter out the users from the second
OU and only sync group memberships for users in the first OU?

Yes, just use a try/catch in your js code, it will just ignore the error
and the loop will continue on other members.

See try/catch examples in
https://lsc-project.org/documentation/tutorial/synchronizegroups#properties
--
Clément Oudot | Identity Solutions Manager

***@worteks.com

Worteks | https://www.worteks.com

_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
lsc-***@lists.lsc-project.org
https://lists.lsc-project.org/cgi-bin/mailman/listinfo/lsc-

[Lior Dotan]

Post by Clément OUDOT

Post by Lior Dotan
Hi All,
My question is, is there a way to filter out the users from the second
OU and only sync group memberships for users in the first OU?

Yes, just use a try/catch in your js code, it will just ignore the error
and the loop will continue on other members.
See try/catch examples in
https://lsc-project.org/documentation/tutorial/synchronizegroups#properties

That indeed fixed the issue.
Thanks a lot!
_______________________________________________________________
Ldap Synchronization Connector (LSC) - http://lsc-project.org

lsc-users mailing list
lsc-***@lists.lsc-project.org
https://lists.lsc-project.org/cgi-bin/mailm