How can I specify a User DN that contains a space?

[Wex Help]

When configuring a Directory's User Configuration in Crowd that's connecting to Active Directory and I specify a User DN without a space (e.g. London) the test succeeds. But when I provide a User DN with a space (e.g. New York) I receive the following error:

No results were found from your search. org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of: 'DC=foo,DC=com' ]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of: 'DC=foo,DC=com' ]; remaining name 'OU=New York,dc=foo,dc=com'

Since both OU=New York and OU=London exist in AD, how can I use an OU with a space in its name?

[Bruno Vincent · Accepted solution]

Strange. Works for me. Did you check that the username you defined in the connector tab is allowed to browse the New York OU?

[Wex Help]

When I specify the top level OU everything works, but if I specify a nested one I get the error above (my apologies if this isn't the right terminology, I don't work with LDAP much). For example:

DC=foo,DC=com

-- OU=Bar Users

--– OU=London

--– OU=New York

I can specify OU=London or OU=Bar Users and the search on the Configuration tab works, but if I specify New York it fails. I've verified that the user on the Connector tab can browse OU=New York.

[Bruno Vincent]

I have just done the exact same test and it worked again for me. I must be missing something here. Here is what you should have:

• Connector tab > Base DN: DC=FOO,DC=COM
• Configuration tab > User DN: OU=New York,OU=Bar Users

[Wex Help]

Ah, ok. The error was in my understanding, I didn't know how to construct the path and my OU=London was matching a top level OU of London, but there was no top level OU of New York. I changed the configuration to match your suggestion and the search works.