LDAP: error code 34 - 0000208F: NameErr: DSID-031001F7, problem 20 06 (BAD_NAME)

[Deleted user · Accepted solution]

@Nic Brough [Adaptavist] It turns out it is a bad DN, as you said in your answer.

AD has a bug apparently, where replication "clashes" can cause odd entries to be generated in AD.  In this case, we found three offending entries which looked like this:

Some-valid-looking-groupname
CNF:57759099-0d22-4168-b16d-4dea649a0123

The carriage return is no mistake.  This is pasted straight out of the AD Users and Computers CPL, and the group name includes a CR.

Removing these offending groups made JIRA happy.  They could also probably be filtered out as seen in some of the support articles, since they have "CNF:" in common.

[Nic Brough -Adaptavist-]

You're feeding it a broken domain name (DN)