FCS 1.5 Not all Active Directory groups visible in list

martinvandiemen · fully protected Joined: 04 Dec 2009 Posts: 13

Hi,

We just upgraded Final Cut Server to 1.5 and want to make use of Active Directory groups to set permissions in FCS. I've created a few groups in AD which do not appear in the list when I want to add these to Group Permissions. I do see many AD groups but some are not in the list. I can find the group in the Directory application and also with dscl (dscl /Active Directory/domain.tld -read /Groups/fcs-editor).

Please advice.

Thanks in advance,

Martin

matx · Xsan Master Joined: 15 Apr 2005 Posts: 263

Adjust AD plugin to access a greater # of records.

martinvandiemen · fully protected Joined: 04 Dec 2009 Posts: 13

vitali · partially protected Joined: 31 Oct 2007 Posts: 8

I would rather go an easier route: narrow down the Search Policy.
Check with your Active Directory administrator and see what preferred domain you should be using. That is usually the specific domain for your location, department, division, etc. Hopefully it is less than 2,000 records, the number Final Cut Server sees.
So, in Directory Utility, click on Search Policy, delete "/Active Directory/All Domains", don't apply yet, but click on the plus sign, and see if you can choose just the specific domain you should be really working in. Do the same to contacts.
It might to be a way to increase the default limit of 2,000 in Search Policy, but I haven't had time to research that.
Just to check how many groups your Final Cut Server really "sees" run
fcsvr_client list_groups