AD/Internal Hybrid user source only returns a subset of users instead of the full AD list

Ignition
1

Hi everyone,

I am using an Ignition AD/Internal Hybrid user source.

Authentication works correctly. In Active Directory, the OU used as the user listing base contains all users and looks correct. However, in Ignition, the user source only shows a subset of users, roughly 14 in total. Strangely enough, 10 of those users are no longer active members.

This used to work differently before, when all users in the referenced OU were visible.

I also compared the settings of the faulty AD/Internal Hybrid user source with a working one, and apart from the OU, the settings do not differ. So this does not appear to be a configuration issue.

Has anyone seen this behavior before?

What I have already checked:

  • users are present in the AD OU / user listing base
  • hybrid user source configuration
  • settings compared against a working source, with no differences except the OU

Any help or hints would be appreciated.

Thanks

2

(post deleted by author)

3

Hello everyone,

the issue has been resolved. The cause was that an AD-side filter parameter was changed from one number range to another without us being informed.

After the filter was corrected, everything started working again as expected.