Sometimes when multiple search filters are used for LDAP parameters in an Admin domain, when clicking the "Synchronize Now" button in TIBCO Administrator GUI, Administrator throws NullPointerException.

Sometimes when multiple search filters are used for LDAP parameters in an Admin domain, when clicking the "Synchronize Now" button in TIBCO Administrator GUI, Administrator throws NullPointerException.

book

Article ID: KB0089709

calendar_today

Updated On:

Products Versions
TIBCO Administrator -
Not Applicable -

Description

Description:
Symptoms
=========
When clicking the "Synchronize Now" button in TIBCO Administrator GUI, User Management > Roles > Select LDAP Groups > Synchronize Now, Administrator throws NullPointerException.
"......
Error [CorporateRepository] AESDKJ-0000 [HttpProcessor[8092][0]] java.lang.NullPointerException
    at com.tibco.pof.authorization.ldap.LdapCorporateRepository.searchLDAP(LdapCorporateRepository.java:1031)
    at com.tibco.pof.authorization.ldap.LdapCorporateRepository$LdapSearchParamSetUserCollection.search(LdapCorporateRepository.java:1827)
    at com.tibco.pof.util.CompositeSearchableCollection$CompositeSearchIterator.hasNext(CompositeSearchableCollection.java:101)
    at com.tibco.pof.util.CompositeSearchableCollection$CompositeSearchIterator.hasNext(CompositeSearchableCollection.java:112)
......"

Impact
======
Roles and users can not be synced to Administrator domain.

Workaround
==========
Eliminate multiple search filters. If possible, use only one Search filter by combining the search filters into one.

- When all your search filters use the same base DN:
e.g.
instead of: (&(objectclass=group)(cn=a*)) and (&(objectclass=group)(cn=b*))
use: (&(objectclass=group)(|(cn=a*)(cn=b*))).

- When some of search filters use different base DN, then try to combine all thes into one, and use a base DN that covers all of thse.
e.g:
instead of:
    dc=hr,dc=acme,dc=com          (objectclass=group)
    dc=engg,dc=acme,dc=com   (objectclass=group)
use
    dc=acme,dc=com                     (objectclass=group)

Cause
======
An known issue when multiple search filters are used for LDAP configuration.

Resolution
==========
The issue will be addressed in the Administrator 5.3.0 release.

Symptoms:

Cause:

Issue/Introduction

Sometimes when multiple search filters are used for LDAP parameters in an Admin domain, when clicking the "Synchronize Now" button in TIBCO Administrator GUI, Administrator throws NullPointerException.