Troubleshooting
Problem
Environment
Resolving The Problem
The LDAP Sync(SCIM) doesn’t support E-Audit indeed.
For LDAP sync we use direct SQL statements and not Mbos. This is done for performance reasons.
A full replace is done so if the AD has say 20,000 (even more) users in a group we do not want to create Mbos for all of them, so a SQL is used to delete all records first and then insert. After that using SQL we delete all users from groupuser which do not exist in MAXUSER table.
That’s why the E-Audit doesn’t capture the LDAP Sync update/delete events.
You may see the initial user creation and group assigment only, which is derived from the user mbos.
*Same approach is seen in Maximo 7.6.1.x and the results are the same.
.
Document Location
Worldwide
Was this topic helpful?
Document Information
Modified date:
06 May 2024
UID
ibm17150271