I'm experiencing a similar issue.  I have some users that have blank rosters.  Their able to login without issue, but no one their roster. 

My setup is Active Directory 2003 servers, OpenFire 3.5.1 (upgraded 04/29 to see if it would help, was 3.5.0) & SQL2000. 

Example: I can have 2 users in the same OU and members of the same security groups, one will work fine with roster populated and the other will have blank.  Digging into this I found that if I go view the user in user summary, I can see they're Group Memberships, which updates with AD changes, but when i check the Roster it's empty?  When I check in Group Summary either the account is not a member of the group or has the red astirix (* Note: Remote users or entities should accept presence subscriptions automatically.) and shows no presence.

To me it would seem that the Roster membership is not being updated with AD changes.  I've read through some similar posts but haven't found any remedy to this issue.  Any pointers or help would be appreciated... if I missed any important information let me know and I'll post it.

Tks

computer accounts and user accounts do not match in any instance.  I did not mention however that agents havin the issue or empty roster are using Spark via Citrix.  That being said it does not matter if they are using Spark via Citrix or local machine.  I also get the issue when creating new accounts.  Contacts won't show up for the user even if I add them manually from the Console User Roster.... still diggin.  This issue is hindering my deployment to a new server we setup specifically for IM.  We were running WildFire with local DB (non AD integrated) without issue for approx 2 years.  We ran OpenFire for the past 6mths without issues until we moved the largest group over... they started reporting empty rosters. 

Any help or pointers appreciated... I feel comfortable with coding and SQL so can head down that road as well... just need a map ;o)

I'm still having this issue and I'm sure someone out there experienced similar. Running AD, OF3.5.1 and Spark 2.5.8 and some newly setup accounts are able to login however have nothing in their rosters.  Newly setup accounts are those that have been added to specific OF Security Groups to manage access to the server and Rosters.  When I check the server console, user properties of a "blank roster" user that is logged is I see the proper groups they are a member of in AD however when view the Roster of that person it is empty. Users can however use the search function to add a "friends" list.

This is becoming more and more frequent as we're moving users off the old WildFire server to the new OpenFire server that's AD integrated. I had to put a hold on migration until this issue is resolved.... Needless to say this is getting pretty frustrating. To bandaid the issue as I noted above I created a new AD account for the effected user and let is sit for an hour or so before letting the user login and then all was fine. This is not an option going forward as we have too much tied into AD accounts and quite frankly not a solution.

Someone out there must have experienced the same or similar instance? I'm open to any hints or pointing in the right direction. If I need to provide any specific information to help troubleshoot please let me know.... Thanks.

I am having the exact problem on my implementation as well.

My users sometime see their Rosters and sometimes they dont.

I am really having diifculty in figuring out how to solve this as I am not very well versed in LDAP\AD customization and someone else in our department does that. I went to them and advised them to see if duplicate sAMAccountname are present in the AD - and we couldnt find any.

Would you mind explainging how you were able to find out duplicate SAMAccountNames and how and what steps did you perform ( queries, changes etc) to change the sAMAccountName - bear in mind we have more the 500 employees so - going in and changing all the sAMAccountName is frustrating - but the main question is how to find out if I am having duplicate sAMAccoutnName and how to change these if duplicates exsist.

Thanks for the reply man.

In my scenerio - this doesnt seem to be the case - when I searched for the effected user - the search came back back with only one account - unless Iam performing the search in some wrong way - I performa  search by using the custom search facility in ADUC - do you have some different way?