Checking for conflicts and matching candidates

To move a user or group from Pending Import to a UNIX profile attached to an Active Directory user or group, you must first check for potential conflicts and for potential matching user or group candidates in Active Directory. If you selected the Check data conflicts while importing option in the Import from UNIX wizard, you have already completed this step and can continue to Mapping UNIX profiles to Active Directory accounts.

To check the status of pending information:

  1. Open Access Manager.
  2. Expand Zones and any parent or child zones required to select the zone name into which you imported users and groups.
  3. Expand UNIX Data, then expand Groups and Users to see the Pending Import nodes.

    For example, if you imported information for the “Finance” zone, open that zone, expand UNIX Data, then expand Groups and Users.

  4. Select Pending Import to display the list of users or groups to be imported.

    For example:

  5. Select all or a subset of pending import users or groups, right-click, then click Check status.

    • For pending import groups, a potential match is an Active Directory group with a common name or sAMAccountName that is the same as the pending import group name.
    • For pending import users, a potential match is an Active Directory user with a common name that is the same as the pending import user’s GECOS field, or sAMAccountName that is the same as the UNIX user name.

    If there is a match, Access Manager displays that group or user as the default Active Directory candidate and the status as Ready to import.

    If Access Manager can’t identify a potential match in Active Directory or there are other issues, the status for the pending import group or user describes the issue encountered.