Feature Requests

Ability to update 'manager' AD attribute

Use case: As an admin, the ability to onboard new users and set the user's manager in AD using one APM provisioning job would greatly improve the consistency within our environment.


Currently, if attempted via a Global Variable in the Synchronization to Active Directory section of a Site Template, the job gets stuck on "Provisioning..." and this error is seen in the APM logs:

Queue\BeanStalk\Jobs\ProvisionJob::Queue\BeanStalk\Jobs\ProvisionJob::run::62::Exception::(2) ldap_modify_batch(): Batch Modify: Constraint violationFILE TRACE:1: /var/www/html/pme/application/classes/Queue/BeanStalk/BeanstalkQueue.php (0) run2: /var/www/html/pme/application/classes/Queue/Queue.php (0) consumeMessage3: /var/www/html/pme/worker.php (0) consume


Since this attribute is populated with another AD user's Distinguished Name, it looks like it's in a format (example: CN=WillPowers,OU=Support,OU=Users,OU=Demo,DC=demo,DC=al,DC=com) that APM isn't expecting or prepared to deal with. Also, this format is not at all user friendly so perhaps an AD lookup would be a better approach.


Screenshots attached.

  • Will Powers
  • Apr 25 2023
  • Attach files