Error Performing LDAP Search Filter Due to Incomplete Base DN
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Symptoms
The External User Test fails with the following error:
1
2
3
4
5
6
7
8
9
Error performing LDAP search filter '(objectClass=group)', base DN 'OU=Wiki-ITS,OU=Applications,OU=MQ-Resources': [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
�]
com.atlassian.paddle.search.SearchException: Error performing LDAP search filter '(objectClass=group)', base DN 'OU=Wiki-ITS,OU=Applications,OU=MQ-Resources': [LDAP: error code 1 - 000020D6: SvcErr: DSID-031006CC, problem 5012 (DIR_ERROR), data 0
�]
at com.atlassian.paddle.search.DefaultSearcher.search(DefaultSearcher.java:49)
at com.atlassian.paddle.task.ListGroupsTask.doSearch(ListGroupsTask.java:47)
at com.atlassian.paddle.task.ListGroupsTask.withConnection(ListGroupsTask.java:33)
at com.atlassian.paddle.task.DefaultTaskRunner.runTask(DefaultTaskRunner.java:36)
at com.atlassian.paddle.Paddle.testConnectivity(Paddle.java:131)Cause
Confluence is unable to perform the LDAP search due to incorrect settings in atlassian-user.xml. In this case, the attributes baseUserNamespace and baseGroupNamespace are not set as a complete DN:
1
2
<baseUserNamespace>ou=atlas-users</baseUserNamespace>
<baseGroupNamespace>ou=atlas-groups</baseGroupNamespace>Resolution
Set the attributes as a complete DN. For instance:
1
2
<baseUserNamespace>ou=atlas-users,dc=atlassian,dc=com</baseUserNamespace>
<baseGroupNamespace>OU=atlas-groups,dc=atlassian,dc=com</baseGroupNamespace>Was this helpful?