Hauthsync does not sync LDAP groups

Products

• CA Harvest Software Change Manager

Issue/Introduction

We integrated Harvest with LDAP and when run hauthsync to sync the users and groups, it didn't sync the groups:

I00060040: New connection with Broker <broker-name> established.
I00060081: External authentication synchronization summary: Users not updated: 39; Users updated: 23
I00060084: Groups not updated: 331 ; Groups updated: 0
hauthsync has been executed successfully.

 

Environment

CA Harvest Software Change Manager all versions

Resolution

There are two parameters in HServer.arg file

-ldapattrusringrp
-ldapattrgrpinusr

The first parameter defines your LDAP server's attribute that evaluates members/users of a group and the second defines your LDAP server's attribute that evaluates groups of a user. If these two parameters are not correct, then the groups will not be synced.

Please talk to your LDAP administrator for right attribute values and then change accordingly. Then restart the broker and run hauthsync again.

Additional Information

you could use these two power shell commands to review the attribute names:

Get-ADGroup

Get-ADUser

Again, talk to your LDAP administrator if you have some questions regarding the outputs from these two commands.