000036039 - Unbalanced parenthesis error when testing a new Active Directory Collector in RSA Identity Governance & Lifecycle

Document created by RSA Customer Support Employee on Feb 22, 2018
Version 1Show Document
  • View in full screen mode

Article Content

Article Number000036039
Applies ToRSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: 7.0, 7.1
 
IssueAny existing Active Directory Collectors are working; but when creating a new collector, the individual steps test successfully when building the collector, but the collector fails when it is run. The overall test in the UI fails with the following:
Stack java.lang.RuntimeException at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.setContextAndGetUsers(LdapAccountDataReader.java:1207)
  at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.(LdapAccountDataReader.java:1110)
  at com.aveksa.collector.accountdata.ADAccountDataReader$ADAccountDataDirectoryIterator.(ADAccountDataReader.java:951)
  at com.aveksa.collector.accountdata.ADAccountDataReader.createAccountDataDirectoryIterator(ADAccountDataReader.java:657)
  at com.aveksa.collector.accountdata.ADAccountDataReader.createAccountDataDirectoryIterator(ADAccountDataReader.java:62)
  at com.aveksa.collector.accountdata.LdapAccountDataReader.getAccountIterator(LdapAccountDataReader.java:178)
  at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:393)
  at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
  at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:269)
  at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:535)
  at com.aveksa.client.component.collector.DefaultCollectorManager.actUpon(DefaultCollectorManager.java:203)
  at com.aveksa.client.component.collector.DefaultCollectorManager.handle(DefaultCollectorManager.java:102)
  at com.aveksa.client.component.event.DefaultEventManager.handle(DefaultEventManager.java:60)
  at com.aveksa.client.datacollector.framework.SimpleEventSource.notifyListeners(SimpleEventSource.java:67)
  at com.aveksa.client.component.communication.DefaultCommunicationManager.notifyEvent(DefaultCommunicationManager.java:377)
  at com.aveksa.client.component.communication.ChangeListHandler.applyChanges(ChangeListHandler.java:364)
  at com.aveksa.client.component.communication.ChangeListHandler.access$300(ChangeListHandler.java:58)
  at com.aveksa.client.component.communication.ChangeListHandler$ChangeApplyingRunnable.run(ChangeListHandler.java:275)
  at java.lang.Thread.run(Thread.java:745) End Stack

 

The following error is found in the aveksaServer.log:

04/10/2017 15:13:06.576 ERROR (ApplyChangesRegularThread-6922) [com.aveksa.collector.accountdata.LdapAccountDataReader] Error occurred in fetching users, Root Cause : Unbalanced parenthesis javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis; remaining name 'DC=mydomain,DC=net' at com.sun.jndi.ldap.Filter.findRightParen(Filter.java:694)
  at com.sun.jndi.ldap.Filter.encodeFilterList(Filter.java:733)
  at com.sun.jndi.ldap.Filter.encodeComplexFilter(Filter.java:657)
  at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:104)
  at com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:74)
  at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:546)
  at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1986)
  at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1848)
  at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1773)
  at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386)
  at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356)
  at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339)
  at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
  at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
  at com.aveksa.collector.accountdata.LdapAccountDataReader.getUsers(LdapAccountDataReader.java:617)
  at com.aveksa.collector.accountdata.LdapAccountDataReader.access$200(LdapAccountDataReader.java:45)
  at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.setContextAndGetUsers(LdapAccountDataReader.java:1195)
  at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.<init>(LdapAccountDataReader.java:1110)
  at com.aveksa.collector.accountdata.LdapAccountDataReader$TestAccountDataIterator.<init>(LdapAccountDataReader.java:1325)
  at com.aveksa.collector.accountdata.ADAccountDataReader$ADTestAccountDataIterator.<init>(ADAccountDataReader.java:960)
  at com.aveksa.collector.accountdata.ADAccountDataReader.createTestAccountDataIterator(ADAccountDataReader.java:682)
  at com.aveksa.collector.accountdata.ADAccountDataReader.createTestAccountDataIterator(ADAccountDataReader.java:62)
  at com.aveksa.collector.accountdata.LdapAccountDataReader.getAccountIteratorForTestData(LdapAccountDataReader.java:212)
  at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:390)
  at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
  at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectTestData(AccountDataCollector.java:277)
  at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:532)
  at com.aveksa.client.component.collector.DefaultCollectorManager.actUpon(DefaultCollectorManager.java:203)
  at com.aveksa.client.component.collector.DefaultCollectorManager.handle(DefaultCollectorManager.java:102)
  at com.aveksa.client.component.event.DefaultEventManager.handle(DefaultEventManager.java:60)
  at com.aveksa.client.datacollector.framework.SimpleEventSource.notifyListeners(SimpleEventSource.java:67)
  at com.aveksa.client.component.communication.DefaultCommunicationManager.notifyEvent(DefaultCommunicationManager.java:377)
  at com.aveksa.client.component.communication.ChangeListHandler.applyChanges(ChangeListHandler.java:364)
  at com.aveksa.client.component.communication.ChangeListHandler.access$300(ChangeListHandler.java:58)
  at com.aveksa.client.component.communication.ChangeListHandler$ChangeApplyingRunnable.run(ChangeListHandler.java:275)
  at java.lang.Thread.run(Thread.java:745)
ResolutionThis is resolved in ACM-74103, released in 7.0.2 P07 and 7.1.0 P01.
WorkaroundThe user interface is not processing the carriage returnl/line feeds properly prior to versions 7.0.2 P07 and 7.1.0 P01.  Remove the line break formatting and the collector will work.

Attachments

    Outcomes