search cancel

LDAP adapter job failing due to duplicate users (adjust the Search Filter in CSA)

book

Article ID: 201711

calendar_today

Updated On:

Products

Clarity PPM On Premise Clarity PPM SaaS

Issue/Introduction

LDAP adapter job failing with below error:

com.ca.gd.framework.adaptors.exception.ServiceException: Business Rule Error Occured at  SET_USER_STATUSjava.sql.SQLException: [CA Clarity][Oracle JDBC Driver][Oracle]ORA-30926: unable to get a stable set of rows in the source tables

at com.ca.gd.framework.adaptors.service.AdaptorBusinessRulesExecutor.executeBusinessRules(AdaptorBusinessRulesExecutor.java:125)
at com.ca.gd.adaptorframework.client.impl.service.GDAdaptorClientService.executeAdaptor(GDAdaptorClientService.java:107)
at com.ca.gd.adaptorframework.client.impl.trigger.GDAdaptorClientTrigger.scheduledEventFired(GDAdaptorClientTrigger.java:73)
at com.niku.njs.Dispatcher$BGTask.run(Dispatcher.java:665)
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
at java.base/java.lang.Thread.run(Thread.java:834)

We are getting duplicate LDAP users as they can have type of “User” and “Contact”.
 
Our security group suggested updating filter to include
objectClass=User & objectCategory=person
 
I see the setting in CSA to update the Objectclass but not sure how to include object category.
 
Any suggestion on how to include both in CSA?

Environment

Release : 15.8.1

Component : CA PPM SECURITY INTEGRATION

Resolution

To fix this, check out the documentation on setting LDAP in CSA:

https://techdocs.broadcom.com/us/en/ca-enterprise-software/business-management/clarity-project-and-portfolio-management-ppm-on-premise/15-8-1/administration/csa-clarity-ppm-system-administration/csa-security-passwords-ldap-ssl-sso-xss-and-fips.html#concept.dita_d4bee3f1d49d7a9fb5dad6cc7536c1dc5340ea73_IntegratecappmwithLightweightDirectoryAccessProtocolLDAP

 

You would use the "Search Filter" to narrow it down more.

Here is Microsoft article on how to use the Search filter.

https://docs.microsoft.com/en-us/windows/win32/adsi/search-filter-syntax