Technical Tip: Policies not matching using LDAP groups after upgrade to 8.7.6 or 8.8.2
Description
A User record's LDAP group membership may not synchronize properly when the record is located in multiple directories. If this occurs, the user will not properly match policies using LDAP group criteria.
Scope
Version: 8.7.6 and 8.8.2.
Workaround.
Contact Support for a fix.
Solution.
Addressed in version 8.8.3
Once upgraded, navigate to System -> Scheduler and manually run the task “Synchronize users with directory”
After directory sync is run, it can take some time before users start to match policies.
Workaround:
1) Back up existing /bsc/campusMgr/lib/yams-plugins.jar to another directory (/bsc/campusMgrUpdates/).
2) Stop services.
shutdownNAC
3) Copy into place.
cp yams-plugins.jar_patch_8_7_6 /bsc/campusMgr/lib/yams-plugins.jar
4) Startup services.
startupNAC
5) Navigate to System -> Scheduler and manually run the task 'Synchronize users with directory'.
Note.
After directory sync is run, it can take some time before users start to match policies.