CMN DirSync Fails to Sync Objects When OUs are Excluded (4376928)

When using a contact connector in CMN DirSync to query LDAP in a Domino environment, excluding any OU from the source causes the connector to fail to find any objects. The environment contains both domino Person objects at the root and in a subcontainer (O=subcontainer). If the LDAP root is selected as the source, and an OU is excluded, the connector fails to find any objects, even in the root. However, when no OUs are excluded, the connector finds objects in both the root and the subcontainer, resulting in unintended object synchronization.

This issue disrupts workflows that rely on excluding certain subcontainers, as there is a separate connector meant to handle the objects in the subcontainer. Therefore, excluding OUs is essential to maintain the intended synchronization behavior.