Appendix 3 – Troubleshooting LDAP
For full details on working with LDAP, http://help.comodo.com/topic-157-1-288-5720-Importing-Users-from-LDAP.htm
- Problem: Unhandled Exception:
Solution: The exception was not classified.
- Problem: Size
limit exceeded, unable to extract more then
users from server. Size limit must be increased on server side or specify more strict query
Solution: Active Directory server has limitation on the number of search entries which may be iterated during querying. By default, Microsoft Active Directory allows only 1000 search entries. If the server received more than that, the administrator should override the default LDAP search size limit in the Active Directory, or use more strict query
- Problem: Incorrect filter settings: ....
Solution: Filter settings contain incorrect format or AD server doesn't support it.
- Problem: Incorrect BaseDN settings: ...
Solution: BaseDN value has incorrect format.
- Problem: Unable to connect with provided host in BaseDN settings: ...
Solution: Provided domain name for BaseDN setting cannot be resolved in AD forest tree. Assure a domain name is correct.
- Problem: Unable to resolve
LDAP referral, host
unreachable. Users had found before referral might be imported. Possible solution is to use Global Catalog server (port 3268/3269 as default) to avoid resolving referrals.
Solution: CASG is trying to extract as much as possible information and following referrals to resolve all search entries in a query. If the URL in the referral is unreachable by CASG then the iteration will stop. Only partial result will be provided. That occurs when an administrator uses a private domain and it cannot be accessed with only domain name (the referral contains the list of URLs of the explicit domain names but the information about servers located in the private subnet is absent). To avoid the referrals occurrence in search entries use the Global Catalog server for querying. By default, the port for this server is 3268/3269 and that depends on whether the SSL enabled or not.
- Problem: Unknown error. Users found before error might be imported. Original exception - ...
Solution: Search entries has been terminated within the replication process. Please contact support to find a solution.
- If you do not know your BaseDN, here’s a step-by-step guide to determining your BaseDN.
Most organizations follow a similar convention for their determined BaseDN when the organization sets up its Active Directory. For a company with the domain of example.com, the typically BaseDN is cn=Users,dc=example,dc=com