View/Modify Group Members returns no Results

Products

• CA Identity Manager

Issue/Introduction

On functionality View or Modify Group members does not display any results.

 

In the log we see 

SEARCH dn="dc=logistics,dc=corp" scope=subtree filter=(&(&(objectClass=logisticsgroup)(&(1.1=\00)(1.1=\00)))(objectClass=samplegroup)) eis=uniqueMember delegatedAdmin MatrixApplication MatrixGroupType MatrixBuid MatrixCustomerid description MatrixRoleTypeId MatrixCarriers MatrixLocations cn owner source="######]"
[224] 20210617.171247.284 295.658107 RESULT success 0 entries 0 msecs

 

 

 

 

Environment

Release : 14.3

Component : IdentityMinder(Identity Manager)

Cause

The query appears to be incorrect. IDM is creating invalid query format:

Filter: (uniqueMember=user123)))   doesn’t appear to be valid.

The correct query should be full DN in the uniqueMember filter ->  Filter: (uniqueMember= user123,ou=people,ou=Matrix,dc=logistics,dc=corp)))

 

 

Resolution

In the CA directory, configuration dn-substring-match need to set to “true”