After running the ldap syc query we are getting the attached message and the user that are inactivated in AD are not getting inactive in SDM.
But the import command is working fine .
pdm_ldap_import -l "userid LIKE '%' AND zuserAccountControl = 2"
In last week sync command was also working fine all the inactive user in AD are getting inactivated in SDM.
We have not done any kind of changes in SDM.
We did follow some guide from below:
Please perform the following troubleshooting checks:
-
Search the affected User ID in SDM Contact search and include both active and inactive records.
-
Confirm whether more than one active Contact record exists with the same User ID.
-
If duplicate active contacts are found, retain the valid/current Contact record and inactivate or correct the duplicate record.
-
Verify that the valid Contact record has the correct `LDAP_dn` populated, as `pdm_ldap_sync` works against LDAP-linked contacts.
-
If duplicate User IDs exist because of case differences or previous inactive records, update or clear the User ID from the duplicate/inactive record before reusing the User ID.
-
After cleanup, rerun the sync command:
`pdm_ldap_sync -l "id = ? AND zuserAccountControl=2"`
The `pdm_ldap_import` command may still work because it is able to query LDAP records, but `pdm_ldap_sync` needs to update a unique SDM Contact record. If multiple active records match the same User ID, SDM cannot determine which contact should be updated, so the inactive status is not applied.
If the "Last Name is missing" errors continue, please also review whether the LDAP query is returning objects with missing required attributes, especially `sn`.
The result:
We have cleared the duplicative records and testing the ldap sync again.
We have removed duplicate users but still the issue is same.
Also the users that are having a single contact in servicedesk are not getting closed.
Can anyone what we need to do to resolve this?
Kindly advise.
Regards,
Sukry