Troubleshooting

If you encounter any of the following issues or errors, SailPoint recommends that you follow the guidance provided below to resolve the error before contacting SailPoint Support.

For issues or errors that are not addressed in this connector guide, refer to the following resources for troubleshooting information:

nisNetgroup is not displayed during account aggregation

For OpenLDAP Server version 2.4.26 on windows, it may be an issue to perform an equality search on the nisNetgroupTriple attribute of nisNetgroup objectclass. As a result, the nisNetgroup membership is not displayed during account aggregation.

Resolution: Open the nis.schema file of the OpenLDAP server installation and verify if the nisNetgroupTriple schema attribute definition is same as the following attribute type:

(1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
DESC 'Netgroup triple'
EQUALITY caseExactIA5Match
SUBSTR caseExactIA5SubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26)

If the attribute type is not same as the above, then take a back up of the existing nis.schema file and replace the existing nisNetgroupTriple definition with the above. Save the file and restart the OpenLDAP server. After performing aggregation, nisNetgroup membership must get fetched.

Documentation Feedback

Feedback is provided as an informational resource only and does not form part of SailPoint’s official product documentation. SailPoint does not warrant or make any guarantees about the feedback (including without limitation as to its accuracy, relevance, or reliability). All feedback is subject to the terms set forth at https://developer.sailpoint.com/discuss/tos.