Details
-
Bug
-
Resolution: Obsolete
-
Medium
-
4.3
-
4.03
-
Description
There has been quite a few support cases that has reported sync'ing problems, resulting in this error:
2012-01-17 13:18:48,791 ERROR [QuartzScheduler_Worker-9] [atlassian.crowd.directory.DbCachingDirectoryPoller] pollChanges Error occurred while refreshing the cache for directory [ 10000 ]. com.atlassian.crowd.exception.OperationFailedException: java.util.concurrent.ExecutionException: com.atlassian.crowd.exception.OperationFailedException: org.springframework.ldap.InvalidSearchFilterException: Empty filter; nested exception is javax.naming.directory.InvalidSearchFilterException: Empty filter; remaining name 'DC=pirates,DC=oceans,DC=com' at com.atlassian.crowd.directory.ldap.cache.UsnChangedCacheRefresher.synchroniseAllGroups(UsnChangedCacheRefresher.java:284) at com.atlassian.crowd.directory.ldap.cache.AbstractCacheRefresher.synchroniseAll(AbstractCacheRefresher.java:41)
This is interpreted as a filter field being empty, but checking but User and Group Object filters, they are both populated. It was finally found that this was the problem:
ldap.roles.disabled: "false"
Roles have been deprecated for years in Crowd, but it had been ported into JIRA/Confluence via embedded Crowd. Still the code is there and is simply set to be disabled via the directory attribute, as mentioned above. I'm not sure how this can be enabled, there support has receive a number of tickets relating to this.
For now, I've written this article for the issue:
http://confluence.atlassian.com/display/JIRAKB/InvalidSearchFilterException%3A+Empty+filter+when+Synchronising+LDAP