Page 1 of 1

LDAP Error with empty Search Base

PostPosted:Mon Dec 31, 2012 1:18 am
by Lorderich
Hello,

i am trying to connect OPENKM 6.2.1 to an existing Domino LDAP Server.

Everything works pretty well, but there is 1 problem with the groups from Domino LDAP. Lotus Domino creates all group at the top of the domain.

For example, a Lotus Domino domain looks like this:

Groups
CN=Group 1
CN=Group 2
CN = Group blablabla

Users
O=Company.Local
OU=Sales.Company.local
CN=John Doe OU=Sales O=Company.local

To get the groups from a Domino LDAP Server it is necessary to leave the group search base empty or set it with 2 "". But if i try this, then i get the following error message.

2012-12-31 02:12:12,798 [http-bio-0.0.0.0-8080-exec-6] ERROR com.openkm.principal.LdapPrincipalAdapter - NamingException: null (Base: [""] - Filter: (objectClass=dominogroup) - Attribute: CN)

Is there a way to change the ldap connection code to also allow empty search base for groups?

Kind regards

Lorderich

Re: LDAP Error with empty Search Base

PostPosted:Mon Dec 31, 2012 7:14 am
by dejanfc
What if you set the search base to dc=company,dc=local or o=company.local ?

Re: LDAP Error with empty Search Base

PostPosted:Mon Dec 31, 2012 11:07 am
by jllort
Base can not be "" empty string, provide here your distingued name ( dn ) and we will identify which is the base. Normally connection to server is something like dc=openkm,dc=com ( that's the root of any ldap node and should be used as base )