LDAP Error with empty Search Base

[Lorderich]

Hello,

i am trying to connect OPENKM 6.2.1 to an existing Domino LDAP Server.

Everything works pretty well, but there is 1 problem with the groups from Domino LDAP. Lotus Domino creates all group at the top of the domain.

For example, a Lotus Domino domain looks like this:

Groups
CN=Group 1
CN=Group 2
CN = Group blablabla

Users
O=Company.Local
OU=Sales.Company.local
CN=John Doe OU=Sales O=Company.local

To get the groups from a Domino LDAP Server it is necessary to leave the group search base empty or set it with 2 "". But if i try this, then i get the following error message.

2012-12-31 02:12:12,798 [http-bio-0.0.0.0-8080-exec-6] ERROR com.openkm.principal.LdapPrincipalAdapter - NamingException: null (Base: [""] - Filter: (objectClass=dominogroup) - Attribute: CN)

Is there a way to change the ldap connection code to also allow empty search base for groups?

Kind regards

Lorderich

[dejanfc]

What if you set the search base to dc=company,dc=local or o=company.local ?

[jllort]

Base can not be "" empty string, provide here your distingued name ( dn ) and we will identify which is the base. Normally connection to server is something like dc=openkm,dc=com ( that's the root of any ldap node and should be used as base )