Symantec Access Management

  • Private Community
Back to discussions
Expand all | Collapse all

Why all users in LDAP repository don’t show up on Arcot Administration Console

  • 1.  Why all users in LDAP repository don’t show up on Arcot Administration Console

    Broadcom Employee
    Posted Oct 23, 2014 12:50 AM

    Problem

    On Arcot Administration Console, we created a LDAP organization with the following mapping

    USERNAME=uid
    FNAME=givenName
    LNAME=sn
    MNAME=initials
    TELEPHONENUMBER=telephoneNumber
    EMAILADDR=mail
    STATUS=imUserStatus

     

    But when we search the users on Arcot Administration Console, none of the users in LDAP repository shows up.

     

    Analysis

    Normally UDS uses STATUS field to check the user status, in the following cases the user will be treated as Disabled user and will not be shown up on Arcot Administration Console

    • STATUS value is blank
    • STATUS value is not a numerical value
    • STATUS value is 514   (this is a value of userAccountControl on disabled Active Directory user)

     

    Solution

    In order to allow Arcot Administration Console show up the users, we can do either of the following

    • Remove the STATUS=imUserStatus mapping, or
    • Put a numerical value (!=514) on each user’s imUserStatus attribute.