Here is my LDAP automatic refresh setup
SELECT parameter_name,current_value FROM CONFIGURATION_PARAMETERS WHERE PARAMETER_NAME ILIKE '%LDAP%' order by 1;
parameter_name | current_value
-------------------------+------------------------------------------------------------------------------------
LDAPLinkBindDN | CN=Sathya,CN=users,dc=demo,dc=mapshc,dc=com
LDAPLinkBindPswd | xxxxxxxxxxxx
LDAPLinkConfigFile |
LDAPLinkConflictPolicy | MERGE
LDAPLinkDryRun | 0
LDAPLinkFilterGroup | (&(objectClass=group)(cn=Vertica))
LDAPLinkFilterUser | (&(objectClass=user)(cn=*)(memberof=CN=Vertica,CN=users,dc=demo,dc=mapshc,dc=com))
LDAPLinkFirstInterval | 120
LDAPLinkGroupMembers | member
LDAPLinkGroupName | sAMAccountName
LDAPLinkInterval | 86400
LDAPLinkOn | 1
LDAPLinkRetryInterval | 10
LDAPLinkRetryNumber | 10
LDAPLinkScope | sub
LDAPLinkSearchBase | CN=users,DC=demo,DC=mapshc,DC=com
LDAPLinkSearchTimeout | 10
LDAPLinkStartTLS | 0
LDAPLinkStopIfZeroUsers | 1
LDAPLinkTLSCACert |
LDAPLinkTLSCADir |
LDAPLinkTLSReqCert | allow
LDAPLinkURL | ldap://mapsdemodmc01.demo.mapshc.com
LDAPLinkUserName | sAMAccountName
Here is my LDAP Search
[dbadmin@mapsdemodbv01-clone1 ~]$ ldapsearch -h mapsdemodmc01.demo.mapshc.com -D 'CN=Sathya,CN=users,dc=demo,dc=mapshc,dc=com' -w 'xxxxxxxxx' -b 'CN=users,dc=demo,dc=mapshc,dc=com' '(&(objectClass=group)(cn=Vertica))'
extended LDIF
#
LDAPv3
base <CN=users,dc=demo,dc=mapshc,dc=com> with scope subtree
filter: (&(objectClass=group)(cn=Vertica))
requesting: ALL
#
Vertica, Users, demo.mapshc.com
dn: CN=Vertica,CN=Users,DC=demo,DC=mapshc,DC=com
objectClass: top
objectClass: group
cn: Vertica
member: CN=Sathya,CN=Users,DC=demo,DC=mapshc,DC=com
member: CN=Nagavelan,CN=Users,DC=demo,DC=mapshc,DC=com
member: CN=Vertica,CN=Users,DC=demo,DC=mapshc,DC=com
distinguishedName: CN=Vertica,CN=Users,DC=demo,DC=mapshc,DC=com
instanceType: 4
whenCreated: 20200729122533.0Z
whenChanged: 20200730085002.0Z
uSNCreated: 3040277
memberOf: CN=Vertica,CN=Users,DC=demo,DC=mapshc,DC=com
uSNChanged: 3045083
name: Vertica
objectGUID:: p1JQuzjA60WNm4QYqrpdJg==
objectSid:: AQUAAAAAAAUVAAAAW0KXzQEWqlGX26jmQwcAAA==
sAMAccountName: VerticaDBA
sAMAccountType: 268435456
groupType: -2147483646
objectCategory: CN=Group,CN=Schema,CN=Configuration,DC=demo,DC=mapshc,DC=com
dSCorePropagationData: 16010101000000.0Z
search result
search: 2
result: 0 Success
Here is the output of LDAP_LINK_EVENTS
select event_timestamp,node_name,user_name,event_type,entry_name,entry_oid from LDAP_LINK_EVENTS;
2020-08-03 05:56:01.18283-04 | v_medicaid_node0001 | dbadmin | USER_CREATED | Nagavelan | 45035996326589798
2020-08-03 05:56:01.182902-04 | v_medicaid_node0001 | dbadmin | USER_CREATED | Sathya | 45035996326589802
2020-08-03 05:56:01.183032-04 | v_medicaid_node0001 | dbadmin | ROLE_CREATED | VerticaDBA | 45035996326589806
2020-08-03 06:33:51.824345-04 | v_medicaid_node0001 | dbadmin | SYNC_STARTED | ---------- | 0
2020-08-03 06:33:51.828463-04 | v_medicaid_node0001 | dbadmin | SYNC_FINISHED | | 0
2020-08-03 06:33:51.829147-04 | v_medicaid_node0001 | dbadmin | PROCESSING_STARTED | | 0
2020-08-03 06:33:51.829346-04 | v_medicaid_node0001 | dbadmin | USER_CREATED | Nagavelan | 45035996326589878
2020-08-03 06:33:51.829419-04 | v_medicaid_node0001 | dbadmin | USER_CREATED | Sathya | 45035996326589882
2020-08-03 06:33:51.82956-04 | v_medicaid_node0001 | dbadmin | ROLE_CREATED | VerticaDBA | 45035996326589886
Based on the table it clearly indicates that the users/role were created but it did not happen.Any idea as what could be the issue? The Dry run is set to 0 also