Environment
Qlik Sense All versions
While synchronizing Active Directory users, the Users Repository logs record the following WARNING: Recursive group hierarchy discovered at CN=GroupName,OU=GROUPS,DC=domain,DC=local; breaking the chain here
Example:
2018-05-09 16:46:46 20180509T154646.827+0100 WARN QlikServer1 UserManagement.Repository.Repository.Users.SyncUsersWorker 23 cca51cbe-fd2c-4d9d-9502-5a88d16034eb DOMAIN\serviceuser Recursive group hierarchy discovered at CN=GroupA,OU=GROUPS,DC=domain,DC=local breaking the chain here cca51cbe-fd2c-4d9d-9502-5a88d16034eb
2018-05-09 16:46:46 20180509T154646.827+0100 WARN QlikServer1 UserManagement.Repository.Repository.Users.SyncUsersWorker 23 23b85992-0f28-4c68-abcd-7ed7a9834f9a DOMAIN\serviceuser Recursive group hierarchy discovered at CN=GroupB,OU=GROUPS,DC=domain,DC=local; breaking the chain here 23b85992-0f28-4c68-abcd-7ed7a9834f9a
2018-05-09 16:46:46 20180509T154646.827+0100 WARN QlikServer1 UserManagement.Repository.Repository.Users.SyncUsersWorker 23 be6afe62-09ee-490d-933f-094825ab9f95 DOMAIN\serviceuser Recursive group hierarchy discovered at CN=GroupC,OU=GROUPS,DC=domain,DC=local; breaking the chain here be6afe62-09ee-490d-933f-094825ab9f95
20180509T154646.827+0100 WARN QlikServer1 UserManagement.Repository.Repository.Users.SyncUsersWorker 23 c104fe59-a8a8-4700-8ef4-d306d1b9c176 DOMAIN\serviceuser Recursive group hierarchy discovered at CN=GroupD,OU=GROUPS,DC=domain,DC=local breaking the chain here c104fe59-a8a8-
Groups have recursive structure in Active Directory, and a "Loopback" effect is occurring. The Qlik Sense User Directory Connector loops through the groups and a delay is observed.
Resolution:
Filtering groups, by placing LDAP filter in User Directory Connector, solves the issue.