Active Directory Aggregation Error

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

8.1

Please share any images or screenshots, if relevant.

Error on UI from Aggregation Task Result
Error on UI from Aggregation Task Result1366×728 156 KB

*

Please share any other relevant files that may be required (for example, logs).

sailpoint.log (82.4 KB)
AD-BNYMELLON-LUX.Modified.Connector.XML (32.1 KB)
AD-BNYMELLON-LUX.Original.Connector.xml (32.2 KB)
*

Share all details about your problem, including any error messages you may have received.

*I am having a weird problem aggregating Active Directory connector. I have attached all logs and screenshots.

  1. This is the error from task results:Exception during aggregation. Reason: java.lang.RuntimeException: [ERROR 1] sailpoint.connector.ConnectorException: 782187143 Failed to read from: dc=bnymellon-lux,dc=com - ldap://192.168.1.106:389 - Missing ‘equals’*
  2. And this seems to be the corresponding error from tomcat logs(the file named sailpoint.logs in the attachements.

Error: 2025-05-14T08:25:02,412 ERROR QuartzScheduler_Worker-4 sailpoint.connector.LDAPConnector:7503 - 1420339466 Failed to read from: dc=bnymellon-lux,dc=com - ldap://192.168.1.106:389 - Missing ‘equals’
javax.naming.directory.InvalidSearchFilterException: Missing ‘equals’
at com.sun.jndi.ldap.Filter.encodeSimpleFilter(Filter.java:330) ~[?:?]
at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:171) ~[?:?]
at com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:74) ~[?:?]
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:547) ~[?:?]
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:2014) ~[?:?]
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1873) ~[?:?]
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1798) ~[?:?]
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392) ~[?:?]
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358) ~[?:?]
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:276) ~[?:?]
at sailpoint.connector.LDAPConnector.search(LDAPConnector.java:1150) ~[connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.LDAPConnector$ContainerIterator.init(LDAPConnector.java:7497) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.LDAPConnector$LDAPIterator.getIterator(LDAPConnector.java:6530) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ADLDAPConnector$ADLDAPIterator.hasNext(ADLDAPConnector.java:8447) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ConnectorProxy$CustomizingIterator.peek(ConnectorProxy.java:1186) [connector-bundle-identityiq.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ConnectorProxy$CustomizingIterator.hasNext(ConnectorProxy.java:1215) [connector-bundle-identityiq.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.api.Aggregator.aggregateAccounts(Aggregator.java:3058) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.primaryAccountAggregation(Aggregator.java:2740) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.aggregateApplication(Aggregator.java:2588) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.phaseAggregate(Aggregator.java:2489) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.execute(Aggregator.java:2069) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.doUnpartitioned(ResourceIdentityScan.java:238) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.execute(ResourceIdentityScan.java:218) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:895) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:722) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.scheduler.JobAdapter.execute(JobAdapter.java:128) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at org.quartz.core.JobRunShell.run(JobRunShell.java:202) [quartz-2.2.3.jar:?]
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573) [quartz-2.2.3.jar:?]

Error:2025-05-14T08:25:02,443 ERROR QuartzScheduler_Worker-4 sailpoint.connector.LDAPConnector:6535 - 1420339466 Aggregation failed.
2025-05-14T08:25:02,443 ERROR QuartzScheduler_Worker-4 sailpoint.connector.LDAPConnector:6536 - Aggregation failed. 1420339466 Failed to read from: dc=bnymellon-lux,dc=com - ldap://192.168.1.106:389 - Missing ‘equals’
sailpoint.connector.ConnectorException: 1420339466 Failed to read from: dc=bnymellon-lux,dc=com - ldap://192.168.1.106:389 - Missing ‘equals’
at sailpoint.connector.LDAPConnector$ContainerIterator.init(LDAPConnector.java:7506) ~[connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.LDAPConnector$LDAPIterator.getIterator(LDAPConnector.java:6530) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ADLDAPConnector$ADLDAPIterator.hasNext(ADLDAPConnector.java:8447) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ConnectorProxy$CustomizingIterator.peek(ConnectorProxy.java:1186) [connector-bundle-identityiq.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ConnectorProxy$CustomizingIterator.hasNext(ConnectorProxy.java:1215) [connector-bundle-identityiq.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.api.Aggregator.aggregateAccounts(Aggregator.java:3058) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.primaryAccountAggregation(Aggregator.java:2740) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.aggregateApplication(Aggregator.java:2588) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.phaseAggregate(Aggregator.java:2489) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.execute(Aggregator.java:2069) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.doUnpartitioned(ResourceIdentityScan.java:238) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.execute(ResourceIdentityScan.java:218) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:895) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:722) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.scheduler.JobAdapter.execute(JobAdapter.java:128) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at org.quartz.core.JobRunShell.run(JobRunShell.java:202) [quartz-2.2.3.jar:?]
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573) [quartz-2.2.3.jar:?]
Caused by: javax.naming.directory.InvalidSearchFilterException: Missing ‘equals’
at com.sun.jndi.ldap.Filter.encodeSimpleFilter(Filter.java:330) ~[?:?]
at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:171) ~[?:?]
at com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:74) ~[?:?]
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:547) ~[?:?]
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:2014) ~[?:?]
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1873) ~[?:?]
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1798) ~[?:?]
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:392) ~[?:?]
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:358) ~[?:?]
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:276) ~[?:?]
at sailpoint.connector.LDAPConnector.search(LDAPConnector.java:1150) ~[connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.LDAPConnector$ContainerIterator.init(LDAPConnector.java:7497) ~[connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
… 16 more
2025-05-14T08:25:02,443 ERROR QuartzScheduler_Worker-4 sailpoint.api.Aggregator:1783 - Exception during aggregation. Reason: java.lang.RuntimeException: [ERROR 1] sailpoint.connector.ConnectorException: 1420339466 Failed to read from: dc=bnymellon-lux,dc=com - ldap://192.168.1.106:389 - Missing ‘equals’
java.lang.RuntimeException: [ERROR 1] sailpoint.connector.ConnectorException: 1420339466 Failed to read from: dc=bnymellon-lux,dc=com - ldap://192.168.1.106:389 - Missing ‘equals’
at sailpoint.connector.ADLDAPConnector$ADLDAPIterator.finishContainerAggregation(ADLDAPConnector.java:8550) ~[connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ADLDAPConnector$ADLDAPIterator.hasNext(ADLDAPConnector.java:8509) ~[connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ConnectorProxy$CustomizingIterator.peek(ConnectorProxy.java:1186) ~[connector-bundle-identityiq.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ConnectorProxy$CustomizingIterator.hasNext(ConnectorProxy.java:1215) ~[connector-bundle-identityiq.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.api.Aggregator.aggregateAccounts(Aggregator.java:3058) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.primaryAccountAggregation(Aggregator.java:2740) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.aggregateApplication(Aggregator.java:2588) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.phaseAggregate(Aggregator.java:2489) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.execute(Aggregator.java:2069) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.doUnpartitioned(ResourceIdentityScan.java:238) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.execute(ResourceIdentityScan.java:218) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:895) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:722) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.scheduler.JobAdapter.execute(JobAdapter.java:128) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at org.quartz.core.JobRunShell.run(JobRunShell.java:202) [quartz-2.2.3.jar:?]
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573) [quartz-2.2.3.jar:?]
2025-05-14T08:25:02,443 ERROR QuartzScheduler_Worker-4 sailpoint.connector.activedirectory.ConnectionManager:1675 - Exception occured while closing context Need to specify class name in environment or system property, or in an application resource file: java.naming.factory.initial
javax.naming.NoInitialContextException: Need to specify class name in environment or system property, or in an application resource file: java.naming.factory.initial
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:702) ~[?:?]
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:305) ~[?:?]
at javax.naming.ldap.InitialLdapContext.getDefaultLdapInitCtx(InitialLdapContext.java:166) ~[?:?]
at javax.naming.ldap.InitialLdapContext.setRequestControls(InitialLdapContext.java:202) ~[?:?]
at sailpoint.connector.activedirectory.ConnectionManager.closeContext(ConnectionManager.java:1668) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.LDAPConnector.closeContextForDomains(LDAPConnector.java:5599) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ADLDAPConnector$ADLDAPIterator.close(ADLDAPConnector.java:9091) [connector-bundle.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.connector.ConnectorProxy$CustomizingIterator.close(ConnectorProxy.java:1264) [connector-bundle-identityiq.jar:8.1 Build a5c9436-20200213-040253]
at sailpoint.api.Aggregator.primaryAccountAggregation(Aggregator.java:2746) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.aggregateApplication(Aggregator.java:2588) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.phaseAggregate(Aggregator.java:2489) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.Aggregator.execute(Aggregator.java:2069) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.doUnpartitioned(ResourceIdentityScan.java:238) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.task.ResourceIdentityScan.execute(ResourceIdentityScan.java:218) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:895) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.api.TaskManager.runSync(TaskManager.java:722) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at sailpoint.scheduler.JobAdapter.execute(JobAdapter.java:128) [identityiq.jar:8.1 Build 8cbeb0e-20200220-143938]
at org.quartz.core.JobRunShell.run(JobRunShell.java:202) [quartz-2.2.3.jar:?]
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573) [quartz-2.2.3.jar:?]

I updated tomcat setenv.bat to include the value like this CATALINA_OPTS=%CATALINA_OPTS% -Djava.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
and tried to

Add the following Java system property in Tomcat and restart.
–add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED.
without any success.

I also backedup the connector xml file from debug pages and added the following lines to the connector xml file and imported it.




The issue still persists.

If you can guide me resolve the problem. That’d be of great help!

Very Respectfully,
Suresh

2

I also backedup the connector xml file from debug pages and added the following lines to the connector xml file and imported it.

<Attributes>
        <Map>
             <entry key="java.naming.factory.initial" value="com.sun.jndi.ldap.LdapCtxFactory"/>
        </Map>
     </Attributes>

The issue still persists.

Any help would be greatly appreciated.

3

Hi @sjagirdar1580 ,

Could you please check the iterateSearchFilter configuration in your application to ensure it is set correctly?

To troubleshoot or validate the setup, try using the following iterateSearchFilter value:

<entry key="iterateSearchFilter" value="(objectClass=user)"/>

After updating the filter, initiate the account aggregation process to verify that user objects are being retrieved as expected."

4

seems to be an issue with the LDAP filter you are using in your config. have you tried reviewing it?

5

Hi @Arun-Kumar

Your solution worked!

Regards,
Suresh

6

Thank you @sunnyajmera. The change in LDAP Filter worked!

Thanks Ya All for the support!

Very Respectfully,
Suresh

7

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.