KACE Product Support Question

K1000: LDAP label not applying to Users

07/17/2013 5135 views

Here is the filter I am using:
(&(samaccountname=KBOX_USER_NAME)(memberOf=CN=IS Employees,OU=Groups,DC=xxxx,DC=xxxxxxxxxx,DC=com))
 If I replace KBOX_USER_NAME with * and test, I get an accurate count of the members of that group in AD.
If I replace KBOX_USER_NAME with the name of an account that I know is a member of that group and test, it returns a count of 1, and returns a zero if an account is specified that is not in that group in AD.
So.... that leaves me confused at to why even after the user has logged into the portal, the label does not get applied to the user.
Any ideas or suggestions would be greatly appreciated. 

4 Comments   [ + ] Show comments


  • Dumb question but it is enabled right? Filter type is User not Machine.
    • Yes... User, not Machine.
  • The variable is KBOX_USER, not KBOX_USER_NAME
  • Nico_K: For LDAP Authentication you are correct. For LDAP Labels, it would be KBOX_USER_NAME for user labels.
  • At this point, is this something I could open a case with Support for?

All Answers


Went and reviewed a couple of my own labels, then reread what I had typed here....

When you test it, the test is taking the "samaccountname" literally.  Since you don't have a user named KBOX_USER_NAME in your AD, that's why you get 0 results.  When you replace it with an * to test it, you see the count of all results that meet the rest of the filter.  From your testing, it looks like everything is set correctly.

Have you enabled the LDAP label?  There's an 'Enabled' checkbox at the top of the LDAP label : edit detail screen.  Very easy to overlook.

If the label is enabled, have you done an LDAP import since enabling it?

Answered 08/07/2013 by: ShawnCarson
White Belt

  • Yes, the label is, and has been enabled. And yes, the fact that it seems to bring back the appropriate results when testing makes it all the more confusing as to why it is not working.

Don't be a Stranger!

Sign up today to participate, stay informed, earn points and establish a reputation for yourself!

Sign up! or login


This website uses cookies. By continuing to use this site and/or clicking the "Accept" button you are providing consent Quest Software and its affiliates do NOT sell the Personal Data you provide to us either when you register on our websites or when you do business with us. For more information about our Privacy Policy and our data protection efforts, please visit GDPR-HQ