Error Performing LDAP Search Filter Due to Incomplete Base DN

Still need help?

The Atlassian Community is here for you.

Ask the community

Symptoms

The External User Test fails with the following error:

Error performing LDAP search filter '(objectClass=group)', base DN 'OU=Wiki-ITS,OU=Applications,OU=MQ-Resources': [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
�]
com.atlassian.paddle.search.SearchException: Error performing LDAP search filter '(objectClass=group)', base DN 'OU=Wiki-ITS,OU=Applications,OU=MQ-Resources': [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
�]
at com.atlassian.paddle.search.DefaultSearcher.search(DefaultSearcher.java:49)
at com.atlassian.paddle.task.ListGroupsTask.doSearch(ListGroupsTask.java:47)
at com.atlassian.paddle.task.ListGroupsTask.withConnection(ListGroupsTask.java:33)
at com.atlassian.paddle.task.DefaultTaskRunner.runTask(DefaultTaskRunner.java:36)
at com.atlassian.paddle.Paddle.testConnectivity(Paddle.java:131)

Cause

Confluence is unable to perform the LDAP search due to incorrect settings in atlassian-user.xml. In this case, the attributes baseUserNamespace and baseGroupNamespace are not set as a complete DN:

<baseUserNamespace>ou=atlas-users</baseUserNamespace>
<baseGroupNamespace>ou=atlas-groups</baseGroupNamespace>

Resolution

Set the attributes as a complete DN. For instance:

<baseUserNamespace>ou=atlas-users,dc=atlassian,dc=com</baseUserNamespace>
<baseGroupNamespace>OU=atlas-groups,dc=atlassian,dc=com</baseGroupNamespace>

Last modified on Mar 30, 2016

Was this helpful?

Yes
No
Provide feedback about this article
Powered by Confluence and Scroll Viewport.