Issues on resolving Group Memberships

[VenkataPalakave]

Hi Team,

We are facing issue on resolving group memberships for the AD collectors. Below is the scenario:

RSA VIA Version: 7.0.2.126845 (No Patch Applied)

DN: is collected as Account ID

Group Membership Resolution: Account Name

With the above configuration, we found that lots of Group Memberships are getting rejected. From the raw data we observed that the Member Type for the members are being collected as account.

This is the case for the groups belongs to the same domain as well as for the groups from the other domains (see attached)

We suspect this as a bug according to the information provided in the link https://community.rsa.com/docs/DOC-85069

But, as we are on v7.0.2 and according to the release notes this bug has been fixed in 7.0.2 (below screenshot)

Need help to check if it is fixed in 7.0.2 or it still a bug and if it is a bug, please suggest in which patch it has been fixed.

Thanks.

[BorisLekumovich · Accepted solution]

It looks that the issue was fixed in 7.0.2 as well.

The KB article (000035604 - Sub-groups resolution is rejected and Member Type is set to "Account" instead of "Group"... ) which you mentioned describes an issue when collected subgroups appears as accounts

"When configuring an Account Collector to collect groups to sub-groups membership, the resolution fails and the subgroups are collected with type "Account" under the "Member Type" field."

Is this the same behavior you are experiencing?

Are all the rejected records are accounts or sub groups?

Can you share a screenshot from sub-group resolution rules (in your account collector)?

[VenkataPalakave]

Hi Boris,

Yes, we are experiencing the same in 7.0.2. Attached is the screeshots of group data configuration and subgroup resolution.

Thanks.