LDAP adapter job failing due to duplicate users (How to adjust the Search Filter in CSA)

Products

• Clarity PPM On Premise
• Clarity PPM SaaS

Issue/Introduction

LDAP adapter job failing with below error:

com.ca.gd.framework.adaptors.exception.ServiceException: Business Rule Error Occured at  SET_USER_STATUSjava.sql.SQLException: [CA Clarity][Oracle JDBC Driver][Oracle]ORA-30926: unable to get a stable set of rows in the source tables

at com.ca.gd.framework.adaptors.service.AdaptorBusinessRulesExecutor.executeBusinessRules(AdaptorBusinessRulesExecutor.java:125)
at com.ca.gd.adaptorframework.client.impl.service.GDAdaptorClientService.executeAdaptor(GDAdaptorClientService.java:107)
at com.ca.gd.adaptorframework.client.impl.trigger.GDAdaptorClientTrigger.scheduledEventFired(GDAdaptorClientTrigger.java:73)
at com.niku.njs.Dispatcher$BGTask.run(Dispatcher.java:665)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)

Getting duplicate LDAP users as they can have type of “User” and “Contact”.
 
The security group suggested updating filter to include
objectClass=User & objectCategory=person
 
There is a setting in CSA to update the Objectclass, how to include object category.
 

Resolution

To fix this, check out the documentation on setting LDAP in CSA:

CSA: LDAP Documentation

You would use the "Search Filter" to narrow it down more.

Here is Microsoft article on how to use the Search filter.

https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax