Getting LDAP error 32 when adding User DN when configuring AD User directories

[Patricia Bascom]

when I try to set up my AD connection we can add the Base DN and LDAP works for testing.  Once we add the Additional User DN and/or the Additional Group DN testing fails.  with LDAP error 32.  I have the User and Group DN's straight out of AD, so this isn't a typo and I am using the same account for all testing.  This happens with SSL and without.

Test retrieve user : Failed

org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028C, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=<info>,DC=<info>,DC=<info>,DC=<info>' ]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028C, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=<info>,DC=<info>,DC=<info>,DC=<info>' ]; remaining name 'OU=Users,OU=<info>,DC=<info>,DC=<info>,DC=<info>,OU=<info>,DC=<info>,DC=<info>,DC=<info>'

For more information regarding LDAP error codes see Troubleshooting LDAP Error Codes.

[Artur Moura · Accepted solution]

Hi @Patricia Bascom

As per your description, it seems you are inserting the FullDN into the Additional User DN.

You should insert only the path before the BaseDN.

Let's say your domain name is domain.com and you have a OU called Users.

Your BaseDN would be DC=domain,DC=com, and the Additional User DN would be OU=Users only. 

Please let me know how it goes.

[Patricia Bascom]

Artur, thank you, I seriously didn't see to set it like that anywhere.  The issue is different but that is that it can't find the admin user (different fix).  

Tricia

[Artur Moura]

Hi Tricia,

Thanks for your reply!

Sorry, I'm not sure if I got this right, was the issue related to the Bind DN and not with the User Additional DN?

Artur

[Patricia Bascom]

Artur

It was with the User additional DN, I had the full path not just the OU=users

Tricia

[Artur Moura]

Thanks for confirming it, Tricia!