Getting LDAP error 32 when adding User DN when configuring AD User directories

Patricia Bascom

when I try to set up my AD connection we can add the Base DN and LDAP works for testing.  Once we add the Additional User DN and/or the Additional Group DN testing fails.  with LDAP error 32.  I have the User and Group DN's straight out of AD, so this isn't a typo and I am using the same account for all testing.  This happens with SSL and without.

 

Test retrieve user : Failed

org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028C, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=<info>,DC=<info>,DC=<info>,DC=<info>' ]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310028C, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=<info>,DC=<info>,DC=<info>,DC=<info>' ]; remaining name 'OU=Users,OU=<info>,DC=<info>,DC=<info>,DC=<info>,OU=<info>,DC=<info>,DC=<info>,DC=<info>'

For more information regarding LDAP error codes see Troubleshooting LDAP Error Codes.

Artur Moura

Hi @Patricia Bascom

As per your description, it seems you are inserting the FullDN into the Additional User DN.

You should insert only the path before the BaseDN.

Let's say your domain name is domain.com and you have a OU called Users.

Your BaseDN would be DC=domain,DC=com, and the Additional User DN would be OU=Users only. 

Please let me know how it goes.