The Importing Identities from Active Directory sample program IMPORTAD.SAS uses custom LDAP search filters to retrieve persons and groups from an Active Directory server. These filters select the entries that will be processed by the program. In some cases you might code a valid filter that does not qualify any records.

If a valid filter returns zero records, the LDAPS_FREE call will return this error:

If you anticipate that a filter will return an empty set of attributes, making the following change to the sample code will enable the program to run successfully. Note that the code will need to be changed for both Section 3 (Extract User Information from Active Directory) and Section 4 (Extract Group Information from Active Directory).

Change this code:

       /* free search resources */
       call ldaps_free(shandle,rc);
       if rc NE 0 then do;
          msg = sysmsg();
          put msg;
       end;

to the following code:

       /* free search resources */
       if shandle NE 0 then do;
          call ldaps_free(shandle,rc);
          if rc NE 0 then do;
             msg = sysmsg();
             put msg;
          end;
       end;

Operating System and Release Information