LDAP Users Can't Log into Bamboo Due to PartialResultException

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible

Symptoms

Access is denied for (some) LDAP users, and the following error appears in the Bamboo logs:

1 2 3 2010-05-10 15:13:29,888 ERROR [3637969@qtp-26752749-221] [DefaultUserAccessor] com.atlassian.user.impl.RepositoryException: javax.naming.PartialResultException: Unprocessed Continuation Reference(s); remaining name 'dc=xxx,dc=yyy' com.atlassian.user.impl.RepositoryException: com.atlassian.user.impl.RepositoryException: javax.naming.PartialResultException: Unprocessed Continuation Reference(s); remaining name 'dc=xxx,dc=yyy' at com.atlassian.user.impl.ldap.adaptor.LDAPStaticGroupAdaptor.getGroupEntriesViaMembership(LDAPStaticGroupAdaptor.java:117)

Cause

The LDAP repository may refer certain queries to other LDAP servers. If this reference is not followed, no LDAP search results are returned.

Also, the Bamboo server may not be aware of the DNS mapping of the referred LDAP host.

Resolution

Bamboo needs to be started with the following java option -Datlassian.java.naming.referral=follow. To find out how to apply the Bamboo parameter, please see this document.

Updated on April 8, 2025

Still need help?

The Atlassian Community is here for you.