Error Performing LDAP Search Filter Due to Incomplete Base DN
Symptoms
The External User Test fails with the following error:
Error performing LDAP search filter '(objectClass=group)', base DN 'OU=Wiki-ITS,OU=Applications,OU=MQ-Resources': [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
�]
com.atlassian.paddle.search.SearchException: Error performing LDAP search filter '(objectClass=group)', base DN 'OU=Wiki-ITS,OU=Applications,OU=MQ-Resources': [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
�]
at com.atlassian.paddle.search.DefaultSearcher.search(DefaultSearcher.java:49)
at com.atlassian.paddle.task.ListGroupsTask.doSearch(ListGroupsTask.java:47)
at com.atlassian.paddle.task.ListGroupsTask.withConnection(ListGroupsTask.java:33)
at com.atlassian.paddle.task.DefaultTaskRunner.runTask(DefaultTaskRunner.java:36)
at com.atlassian.paddle.Paddle.testConnectivity(Paddle.java:131)
Cause
Confluence is unable to perform the LDAP search due to incorrect settings in atlassian-user.xml. In this case, the attributes baseUserNamespace and baseGroupNamespace are not set as a complete DN:
<baseUserNamespace>ou=atlas-users</baseUserNamespace>
<baseGroupNamespace>ou=atlas-groups</baseGroupNamespace>
Resolution
Set the attributes as a complete DN. For instance:
<baseUserNamespace>ou=atlas-users,dc=atlassian,dc=com</baseUserNamespace>
<baseGroupNamespace>OU=atlas-groups,dc=atlassian,dc=com</baseGroupNamespace>
Last modified on Mar 30, 2016
Powered by Confluence and Scroll Viewport.