Dirsync: Workflow Stage Step Attribute Filtering not working with Not Equals operator and some attributes (4368410)

• A filter was defined as:
  extensionAttribute15 = Conflict
• When applying a Stage Step Attribute Filter with "Not Equals", the workflow detects nothing to stage and ignores all groups in the job.
• Removing the filter stages all objects successfully.

Question: Why does this fail?

This is a known limitation:

• When using "Not Equals" for some attributes (such as extensionAttributeX), no objects fall within scope for a write.
• Other attributes (e.g., CN) work correctly with "Not Equals".

Workaround 1

Use Equals NULL instead of Not Equals some value in the filter.

Workaround 2

Exclude these objects from the Read Workflow by modifying the Source Environment configuration in Dirsync:

1. From the Dirsync dashboard, click the Hamburger menu.
2. Select Environments.
3. Highlight the Source local environment and click Settings.
4. Go to the Filter tab and switch to Advanced mode (if currently in Basic).
5. Add an LDAP query filter that includes the attribute used in the Stage Step Attribute filter:

   (!(<attributeName>=<value>))
   

6. Example query:

   (|(objectClass=user)(objectClass=group)(objectClass=computer))(!(<attributeName>=<value>))
   

7. Copy the query from the Advanced Filter and test it in ADUC Advanced Search.
8. Review the output to confirm only objects in scope for DirSync are displayed.