All geek questions in one place

Ldap 32 error code

I am trying to synchronize OpenLDAP and Active Directory together. To do this, I use a program called LSC-Project, which is listed for this.

I configured the program as best as possible, but I can’t find a way to get rid of the following error:

javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID- 031001CD, problem 2001 (NO_OBJECT), data 0, best match of: 'DC=domname,DC=com' ]; remaining name 'uid=user1,ou=Users' May 09 15:19:25 - ERROR - Error while synchronizing ID uid=user1,ou=Users: java.lang.Exception: Technical problem while applying modifications to directory dn: uid=user1,ou=Users,dc=domname,dc=com changetype: add userPassword: 3+kU2th/WMo/v553A24a3SBw2kU= objectClass: uid

This is the configuration file in which the program runs:

 ############################### Destination LDAP directory # ############################## dst.java.naming.provider.url = ldap://192.168.1.3:389/dc=Windows,dc=com dst.java.naming.security.authentication = simple dst.java.naming.security.principal = cn=Administrator,cn=Users,dc=Windows,dc=com dst.java.naming.security.credentials = 11111 dst.java.naming.referral = ignore dst.java.naming.ldap.derefAliases = never dst.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory dst.java.naming.ldap.version = 3 dst.java.naming.ldap.pageSize = 1000 ######################### Source LDAP directory ######################### src.java.naming.provider.url = ldap://192.168.1.2:389/dc=Linux,dc=com src.java.naming.security.authentication = simple src.java.naming.security.principal = uid=root,ou=users,dc=Linux,dc=com src.java.naming.security.credentials = 11111 src.java.naming.referral = ignore src.java.naming.ldap.derefAliases = never src.java.naming.factory.initial = com.sun.jndi.ldap.LdapCtxFactory src.java.naming.ldap.version = 3 ####################### Tasks configuration ####################### lsc.tasks = Administrator lsc.tasks.Administrator.srcService = org.lsc.jndi.SimpleJndiSrcService lsc.tasks.Administrator.srcService.baseDn = ou=users lsc.tasks.Administrator.srcService.filterAll = (&(objectClass=person)) lsc.tasks.Administrator.srcService.pivotAttrs = uid lsc.tasks.Administrator.srcService.filterId = (&(objectClass=person)(uid={uid})) lsc.tasks.Administrator.srcService.attrs = description uid userPassword lsc.tasks.Administrator.dstService = org.lsc.jndi.SimpleJndiDstService lsc.tasks.Administrator.dstService.baseDn = cn=Users lsc.tasks.Administrator.dstService.filterAll = (&(cn=*)(objectClass=organizationalPerson)) lsc.tasks.Administrator.dstService.pivotAttrs = cn, top, person, user, organizationalPerson lsc.tasks.Administrator.dstService.filterId = (&(objectClass=user) (sAMAccountName={cn})) lsc.tasks.Administrator.dstService.attrs = description cn userPassword objectClass lsc.tasks.Administrator.bean = org.lsc.beans.SimpleBean lsc.tasks.Administrator.dn = "uid=" + srcBean.getAttributeValueById("uid") + ",ou=Users" dn.real_root = dc=Domname,dc=com ############################# Syncoptions configuration ############################# lsc.syncoptions.Administrator = org.lsc.beans.syncoptions.PropertiesBasedSyncOptions lsc.syncoptions.Administrator.default.action = M lsc.syncoptions.Administrator.objectClass.action = M lsc.syncoptions.Administrator.objectClass.force_value = srcBean.getAttributeValueById("cn").toUpperCase() lsc.syncoptions.Administrator.userPassword.default_value = SecurityUtils.hash(SecurityUtils.HASH_SHA1, "defaultPassword") lsc.syncoptions.Administrator.default.delimiter=; lsc.syncoptions.Administrator.objectClass.force_value = "top";"user";"person";"organizationalPerson" lsc.syncoptions.Administrator.userPrincipalName.force_value = srcBean.getAttributeValueById("uid") + "@Domname.com" lsc.syncoptions.Administrator.userAccountControl.create_value = AD.userAccountControlSet ( "0", [AD.UAC_SET_NORMAL_ACCOUNT])

I suspect it has something to do with the baseDn of the Task configuration in terms of the original configuration.

OS is ubuntu 10.04 and Windows2K3

Someone suggested that I do manual synchronization between them, but I did not find any manuals for this. And this program is pretty much the only thing that says it does this job at no cost.

+6
source share
4 answers

The main reason for a NameNotFoundException is that the object you are looking for does not exist or the container you are looking for is not correct .

+8
source

baseDn must be the distinguished name of the base search object, for example ou=users,dc=domname,dc=com .

see also

+7
source

In the case of Spring -ldap, we used this error when we specify baseDn in the context file (LdapContextSource bean), as well as in the createUser code to create userDn.we do not need to specify a permanent copy in buildUserDn()

 protected Name buildUserDn(String userName) { DistinguishedName dn = new DistinguishedName(); //only cn is required as the base dn is already specified in context file dn.add("cn", userName); return dn; }
+1
source

In Active Directory: Users directory is a container class, not an OrganizationalUnit, so you should use: cn=users,dc=domname,dc=com

0
source

Source: https://habr.com/ru/post/915844/

More articles:


All Articles