IBM BPM 8 – Unable to search for groups in a large AD repository

The Situation:

IBM BPM has been successfully installed and is up and running! Also you have successfully added your active directory(s) to your federated repositories and are able to find users and groups in the WAS console. Continuing with the good news you have also successfully found users in IBM BPM ProcessAdmin and ProcessCenter consoles, however for some reason you are unable to find groups and no meaningful error in the logs.

The Problem:

By Default IBM BPM sets the max number of search results of groups returned in IBM BPM is 4500 and because IBM BPM doesn’t the objectclass=group.

The Solution:

Revolutionize Your Business With Generative AI

From product design and software development to virtual agents, content creation, and reporting, GenAI is transforming business. Our AI experts help you unlock GenAI’s full potential and drive growth.

Let’s Get Started

There are two main areas to fix your, object class filter in your repository and the wimconfig.xml

Steps:

WAS Admin Console

1. Login into the WAS Admin console as your administrator user, navigate to your repository and group mappings

Global security > Federated repositories > Manage repositories > LDAP1 >  Federated repositories entity types to LDAP object classes mapping > Group

2. Change the search filter to
   *below is an example of Microsoft Active Directory – Please contact your LDAP or AD admin for a qualified string*

• At minimum

(ObjectCategory=Group)

• At ideally limiting your search results but adding a filter.

(&(ObjectCategory=Group)(|(cn=*any limiting seach*)(cn=any limiting search*)))

3. Save you configuration changes to the master.
4. Sync your node.

File-System.

1. Navigate to this directory and back up your WimConfig.xml  /<IBM BPM install Directory>/profiles/DmgrProfile/config/cells/<yourCellName>/wim/config/wimconfig.xml
2.  And change this value  maxSearchResults=“4500” to your total number +growth of groups you want to return

Sync your nodes.

1. Shut down the server and do a Manual Sync of nodes and restart.
2. You should be able to find your groups now.