Return
-
Title
LDAP device label does not import devices with long computer name -
Description
Devices do not get imported into the LDAP label but when clicking 'test', it shows the total amount of computer objects in the container in Active Directory -
Cause
If a computer name has more than 15 characters, the SMA will not import the device into the label.
Windows systems (and Active Directory) have a computer name (sAMAccountName) limit of 15 characters. This limit is honored and enforced throughout Windows.
-
Resolution
To workaround this limitation, instead of using an AD attribute such as "name" or "CN", use "dNSHostName".
When creating the LDAP filter, use "dNSHostName=KBOX_COMPUTER_NAME.DNSSUFFIX" where "DNSSUFFIX" is your domain (e.g. Company.local).
-
Additional Information
More information about this limitation here