Introduction

When querying a universal AD group using the K2 AD SmartObject service, and that AD group contains users from two domains - domain1 and domain2, where domain2 is a child domain of domain1, the DisplayName fields for the members of domain2 are not returned.

Error Scenario

Note: The circumstances described in this article are one scenario under which this issue may, or is known to occur. The description is intended to be specific to the scenario described and does not take into account all possible scenarios or circumstances.

To reproduce this error:

  1. Set up a multi domain environment (two domain controllers joined by a parent/child two way transitive trust).
  2. Create a group in the parent domain that contains users from both domains.
  3. Register a new AD Service2 instance with both domain LDAPs. Create a SmartObject of the service.
  4. When executing the GetUsersByGroup SmartObject, the child domain users will be returned with no DisplayName.

Error Message

No Error message. The DisplayNames for the members of child domain are not returned.

Error Resolution
This Hotfix is contained within the latest K2 Update. Install the update package to resolve the error.