Sometimes when multiple search filters are used for LDAP parameters in an Admin domain, when clicking the "Synchronize Now" button in TIBCO Administrator GUI, Administrator throws NullPointerException.

book

Article ID: KB0089709

calendar_today

Updated On:

Products Versions
TIBCO Administrator -
Not Applicable -

Description

Description:
Symptoms
=========
When clicking the "Synchronize Now" button in TIBCO Administrator GUI, User Management > Roles > Select LDAP Groups > Synchronize Now, Administrator throws NullPointerException.
"......
Error [CorporateRepository] AESDKJ-0000 [HttpProcessor[8092][0]] java.lang.NullPointerException
    at com.tibco.pof.authorization.ldap.LdapCorporateRepository.searchLDAP(LdapCorporateRepository.java:1031)
    at com.tibco.pof.authorization.ldap.LdapCorporateRepository$LdapSearchParamSetUserCollection.search(LdapCorporateRepository.java:1827)
    at com.tibco.pof.util.CompositeSearchableCollection$CompositeSearchIterator.hasNext(CompositeSearchableCollection.java:101)
    at com.tibco.pof.util.CompositeSearchableCollection$CompositeSearchIterator.hasNext(CompositeSearchableCollection.java:112)
......"

Impact
======
Roles and users can not be synced to Administrator domain.

Workaround
==========
Eliminate multiple search filters. If possible, use only one Search filter by combining the search filters into one.

- When all your search filters use the same base DN:
e.g.
instead of: (&(objectclass=group)(cn=a*)) and (&(objectclass=group)(cn=b*))
use: (&(objectclass=group)(|(cn=a*)(cn=b*))).

- When some of search filters use different base DN, then try to combine all thes into one, and use a base DN that covers all of thse.
e.g:
instead of:
    dc=hr,dc=acme,dc=com          (objectclass=group)
    dc=engg,dc=acme,dc=com   (objectclass=group)
use
    dc=acme,dc=com                     (objectclass=group)

Cause
======
An known issue when multiple search filters are used for LDAP configuration.

Resolution
==========
The issue will be addressed in the Administrator 5.3.0 release.

Symptoms:

Cause:

Issue/Introduction

Sometimes when multiple search filters are used for LDAP parameters in an Admin domain, when clicking the "Synchronize Now" button in TIBCO Administrator GUI, Administrator throws NullPointerException.