Products | Versions |
---|---|
TIBCO Administrator | - |
Not Applicable | - |
Description:
Symptoms
=========
When clicking the "Synchronize Now" button in TIBCO Administrator GUI, User Management > Roles > Select LDAP Groups > Synchronize Now, Administrator throws NullPointerException.
"......
Error [CorporateRepository] AESDKJ-0000 [HttpProcessor[8092][0]] java.lang.NullPointerException
at com.tibco.pof.authorization.ldap.LdapCorporateRepository.searchLDAP(LdapCorporateRepository.java:1031)
at com.tibco.pof.authorization.ldap.LdapCorporateRepository$LdapSearchParamSetUserCollection.search(LdapCorporateRepository.java:1827)
at com.tibco.pof.util.CompositeSearchableCollection$CompositeSearchIterator.hasNext(CompositeSearchableCollection.java:101)
at com.tibco.pof.util.CompositeSearchableCollection$CompositeSearchIterator.hasNext(CompositeSearchableCollection.java:112)
......"
Impact
======
Roles and users can not be synced to Administrator domain.
Workaround
==========
Eliminate multiple search filters. If possible, use only one Search filter by combining the search filters into one.
- When all your search filters use the same base DN:
e.g.
instead of: (&(objectclass=group)(cn=a*)) and (&(objectclass=group)(cn=b*))
use: (&(objectclass=group)(|(cn=a*)(cn=b*))).
- When some of search filters use different base DN, then try to combine all thes into one, and use a base DN that covers all of thse.
e.g:
instead of:
dc=hr,dc=acme,dc=com (objectclass=group)
dc=engg,dc=acme,dc=com (objectclass=group)
use
dc=acme,dc=com (objectclass=group)
Cause
======
An known issue when multiple search filters are used for LDAP configuration.
Resolution
==========
The issue will be addressed in the Administrator 5.3.0 release.
Symptoms:
Cause: