Knowledge Base

The Problem: After checking the settings at Options -> User/Group Sync, users are being imported successfully but no groups appear for import via Groups -> Add/Remove Groups.

The most common reason for this is the Base DN used at Options -> User/Group Sync being too restrictive. The base DN is used to limit LDAP searches to items underneath it. LDAP searches are used to find both users and groups.

E.g. if using a base DN like:

  CN=Users,DC=myorg,DC=edu

then only items under the object 'Users' will be found. If groups are stored at:

  CN=Groups,DC=myorg,DC=edu

they will be ignored (because Groups does not exist beneath Users - it is stored under myorg). In this situation a valid base DN would be:

  DC=myorg,DC=edu

which will allow PaperCut to find both the users and groups.

Once a base DN has been defined you may still limit the users that are imported to one particular group by clicking Change Group under the Import users from option.

Also see:

• Mac Open Directory/LDAP Configuration

Categories: Administration, Domains / Directories, Implementation / Deployment, Troubleshooting

Keywords: not visible, not available

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.