Return
-
Title
LDAP Label Pulls All Users Instead of as Designed -
Description
An LDAP label is designed to apply to a subset of users or computers based on membership of an OU or security group. After creating an LDAP label and testing it is found that all users are getting applied to the LDAP label. -
Cause
One possible cause is the incorrect K1000 variable being used in the advanced search field while creating the LDAP label. In this situation the K1000 variable for user authentication was used in place of the LDAP user varible.
-
Resolution
Instead of using KBOX_USER which the the variable used in user authentication, use one of the approved K1000 variables.
A list of the correct possible K1000 variables can be found in the K1000 administrator guide.Supported user variables include:KBOX_USER_NAMEKBOX_FULL_NAMEKBOX_EMAILKBOX_DOMAINKBOX_BUDGET_CODEKBOX_LOCATIONKBOX_WORK_PHONEKBOX_HOME_PHONEKBOX_MOBILE_PHONEKBOX_PAGER_PHONEKBOX_CUSTOM_1KBOX_CUSTOM_2KBOX_CUSTOM_3KBOX_CUSTOM_4KBOX_ROLE_IDKBOX_API_ENABLEDKBOX_LOCALE_BROWSER_IDKBOX_HD_DEFAULT_QUEUE_IDKBOX_LDAP_UIDOnce the LDAP label has been corrected when users log onto the K1000 the LDAP label will be applied as designed.