| Back | Main view
Empty LDAP query result set stops executing other queries under the same LDAP connector
| Product: | IMiS/ARChive |
| Release: | All until 10.1.2010 SP1 |
| Date: | 10/22/2021 |
Case:
When LDAP connector contains configuration for multiple queries, query with empty resultset stops executing other queries which are configured under the same connector.
Description:
LDAP connectors can be configured to execute multiple LDAP queries with the same connector for user and group synchronization. Configuration example of multiple synchronization queries:
<Arguments>
...
<LdapBaseDN>DC=company,DC=org</LdapBaseDN>
<LdapUserDN>OU=First users</LdapUserDN>
<LdapUserDN>OU=Second users</LdapUserDN>
<LdapUserDN>OU=Third users</LdapUserDN>
...
<LdapGroupDN>CN=First groups</LdapGroupDN>
<LdapGroupDN>CN=Second groups</LdapGroupDN>
<LdapGroupDN>CN=Third groups</LdapGroupDN>
...
</Arguments>
For example, let's assume that queries under 'OU=Second users,DC=company,DC=org' and 'CN=Second groups,DC=company,DC=org' does not return any results because this subtrees are empty. In such configuration, users will be synchronized only from 'First users,DC=company,DC=org' and 'OU=Second users,DC=company,DC=org', groups will be synchronized only from 'CN=First groups,DC=company,DC=org' and 'CN=Second groups,DC=company,DC=org'. Empty result sets are not supported and indicates, that query does not have any more results and therefore query execution ends even if there are multiple queries defined after query which returns empty result set.
Solution:
Upgrade IMiS ARChive server to version 10.1.2010 SP1 which supports empty queries. If upgrade is not possible, configure multiple LDAP connectors and corresponding external directory configurations (for each empty subtree). With such configuration, empty subtrees will not affect other connector configurations and its queries.
Related Documents:
- External directory synchronization and authentication using ActiveDirectory plugin
| Back | Main view