Compliance Accelerator group synchronization does not recursively enumerate Employees from nested child domain groups
An environment containing a parent and child domain has users in both domains. These users are added to Active Directory groups within their domains. A "master" group is created in the parent domain and contains "nested" groups from the parent and child domains are added to this master group. When this group is added to Compliance Accelerator (CA) under the Employees Tab as an Employee Group, only the users contained within nested groups from the parent domain are shown as Employees. Any users in nested groups from the child domain are not shown as Employees, either in the 'Employee and Employee Group' window or under the 'Members' tab in the Group properties. The nested groups themselves, however, are shown. When targeting a child domain group directly (no nesting in any other groups) as an Employee Group, the group is seen but no members are seen. When targeting the child domain users directly, the users are seen as Employees.
It appears CA is not recursively enumerating users' AD LDAP paths from nested child domain groups and appears to be using the LDAP path/AD object from the parent group as it's starting point for all group member LDAP path enumerations. As a result, CA seems to be omitting all users that are not on or below the parent group's LDAP path.
Veritas has acknowledged that the above-mentioned issue is present in the version(s) of the product(s) referenced in this article.
There are currently no plans to address this issue by way of a cumulative hotfix or service pack in the current or previous versions of the software at the present time. This issue may be resolved in a future major revision of the software at a later time, but is not scheduled for any release. If you feel this issue has a direct business impact for you and your continued use of the product, please contact your Veritas Sales representative or the Veritas Sales group to discuss these concerns. For information on how to contact Veritas Sales, please see https://www.Veritas.com.
Was this content helpful?
Rating submitted. Please provide additional feedback (optional):