The bulk–load sample program for Active Directory, importAD.sas, defines the keyidvar macro variable to identify an attribute of the Active Directory Server Information to use as a unique identifier for Persons. ImportAD.sas is inconsistent in its use of keyidvar, resulting in persons not being added as members to groups (i.e. the grpmems table has 0 observations).

The default value of keyidvar is distinguishedName. Other common values are employeeID and sAMAccountName, though any attribute which uniquely identifies a Person should be valid.

To correct the keyidvar reference problem, modify the code as demonstrated here.

The current code block reads:

    /*********************************************************************************/
    /* If we were using the employeeid as the keyid for persons, then we need to     */
    /* re-code the person group memberkeys from DN to employeeIDs so that they match.*/
    /*********************************************************************************/
    %macro transmemkeyid;
      %if %upcase(&keyidvar)=EMPLOYEEID %then %do;
          proc sql;

Change the current line:

to:

Operating System and Release Information