Unbalanced parenthesis error when testing a new Active Directory Collector in RSA Identity Governance & Lifecycle
Originally Published: 2018-02-19
Article Number
Applies To
RSA Version/Condition: 7.0, 7.1
Issue
Stack java.lang.RuntimeException at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.setContextAndGetUsers(LdapAccountDataReader.java:1207)
at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.(LdapAccountDataReader.java:1110)
at com.aveksa.collector.accountdata.ADAccountDataReader$ADAccountDataDirectoryIterator.(ADAccountDataReader.java:951)
at com.aveksa.collector.accountdata.ADAccountDataReader.createAccountDataDirectoryIterator(ADAccountDataReader.java:657)
at com.aveksa.collector.accountdata.ADAccountDataReader.createAccountDataDirectoryIterator(ADAccountDataReader.java:62)
at com.aveksa.collector.accountdata.LdapAccountDataReader.getAccountIterator(LdapAccountDataReader.java:178)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:393)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:269)
at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:535)
at com.aveksa.client.component.collector.DefaultCollectorManager.actUpon(DefaultCollectorManager.java:203)
at com.aveksa.client.component.collector.DefaultCollectorManager.handle(DefaultCollectorManager.java:102)
at com.aveksa.client.component.event.DefaultEventManager.handle(DefaultEventManager.java:60)
at com.aveksa.client.datacollector.framework.SimpleEventSource.notifyListeners(SimpleEventSource.java:67)
at com.aveksa.client.component.communication.DefaultCommunicationManager.notifyEvent(DefaultCommunicationManager.java:377)
at com.aveksa.client.component.communication.ChangeListHandler.applyChanges(ChangeListHandler.java:364)
at com.aveksa.client.component.communication.ChangeListHandler.access$300(ChangeListHandler.java:58)
at com.aveksa.client.component.communication.ChangeListHandler$ChangeApplyingRunnable.run(ChangeListHandler.java:275)
at java.lang.Thread.run(Thread.java:745) End Stack
The following error is found in the aveksaServer.log:
at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.(LdapAccountDataReader.java:1110)
at com.aveksa.collector.accountdata.ADAccountDataReader$ADAccountDataDirectoryIterator.(ADAccountDataReader.java:951)
at com.aveksa.collector.accountdata.ADAccountDataReader.createAccountDataDirectoryIterator(ADAccountDataReader.java:657)
at com.aveksa.collector.accountdata.ADAccountDataReader.createAccountDataDirectoryIterator(ADAccountDataReader.java:62)
at com.aveksa.collector.accountdata.LdapAccountDataReader.getAccountIterator(LdapAccountDataReader.java:178)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:393)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:269)
at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:535)
at com.aveksa.client.component.collector.DefaultCollectorManager.actUpon(DefaultCollectorManager.java:203)
at com.aveksa.client.component.collector.DefaultCollectorManager.handle(DefaultCollectorManager.java:102)
at com.aveksa.client.component.event.DefaultEventManager.handle(DefaultEventManager.java:60)
at com.aveksa.client.datacollector.framework.SimpleEventSource.notifyListeners(SimpleEventSource.java:67)
at com.aveksa.client.component.communication.DefaultCommunicationManager.notifyEvent(DefaultCommunicationManager.java:377)
at com.aveksa.client.component.communication.ChangeListHandler.applyChanges(ChangeListHandler.java:364)
at com.aveksa.client.component.communication.ChangeListHandler.access$300(ChangeListHandler.java:58)
at com.aveksa.client.component.communication.ChangeListHandler$ChangeApplyingRunnable.run(ChangeListHandler.java:275)
at java.lang.Thread.run(Thread.java:745) End Stack
04/10/2017 15:13:06.576 ERROR (ApplyChangesRegularThread-6922) [com.aveksa.collector.accountdata.LdapAccountDataReader] Error occurred in fetching users, Root Cause : Unbalanced parenthesis javax.naming.directory.InvalidSearchFilterException: Unbalanced parenthesis; remaining name 'DC=mydomain,DC=net' at com.sun.jndi.ldap.Filter.findRightParen(Filter.java:694)
at com.sun.jndi.ldap.Filter.encodeFilterList(Filter.java:733)
at com.sun.jndi.ldap.Filter.encodeComplexFilter(Filter.java:657)
at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:104)
at com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:74)
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:546)
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1986)
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1848)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1773)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
at com.aveksa.collector.accountdata.LdapAccountDataReader.getUsers(LdapAccountDataReader.java:617)
at com.aveksa.collector.accountdata.LdapAccountDataReader.access$200(LdapAccountDataReader.java:45)
at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.setContextAndGetUsers(LdapAccountDataReader.java:1195)
at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.<init>(LdapAccountDataReader.java:1110)
at com.aveksa.collector.accountdata.LdapAccountDataReader$TestAccountDataIterator.<init>(LdapAccountDataReader.java:1325)
at com.aveksa.collector.accountdata.ADAccountDataReader$ADTestAccountDataIterator.<init>(ADAccountDataReader.java:960)
at com.aveksa.collector.accountdata.ADAccountDataReader.createTestAccountDataIterator(ADAccountDataReader.java:682)
at com.aveksa.collector.accountdata.ADAccountDataReader.createTestAccountDataIterator(ADAccountDataReader.java:62)
at com.aveksa.collector.accountdata.LdapAccountDataReader.getAccountIteratorForTestData(LdapAccountDataReader.java:212)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:390)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectTestData(AccountDataCollector.java:277)
at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:532)
at com.aveksa.client.component.collector.DefaultCollectorManager.actUpon(DefaultCollectorManager.java:203)
at com.aveksa.client.component.collector.DefaultCollectorManager.handle(DefaultCollectorManager.java:102)
at com.aveksa.client.component.event.DefaultEventManager.handle(DefaultEventManager.java:60)
at com.aveksa.client.datacollector.framework.SimpleEventSource.notifyListeners(SimpleEventSource.java:67)
at com.aveksa.client.component.communication.DefaultCommunicationManager.notifyEvent(DefaultCommunicationManager.java:377)
at com.aveksa.client.component.communication.ChangeListHandler.applyChanges(ChangeListHandler.java:364)
at com.aveksa.client.component.communication.ChangeListHandler.access$300(ChangeListHandler.java:58)
at com.aveksa.client.component.communication.ChangeListHandler$ChangeApplyingRunnable.run(ChangeListHandler.java:275)
at java.lang.Thread.run(Thread.java:745)
at com.sun.jndi.ldap.Filter.encodeFilterList(Filter.java:733)
at com.sun.jndi.ldap.Filter.encodeComplexFilter(Filter.java:657)
at com.sun.jndi.ldap.Filter.encodeFilter(Filter.java:104)
at com.sun.jndi.ldap.Filter.encodeFilterString(Filter.java:74)
at com.sun.jndi.ldap.LdapClient.search(LdapClient.java:546)
at com.sun.jndi.ldap.LdapCtx.doSearch(LdapCtx.java:1986)
at com.sun.jndi.ldap.LdapCtx.searchAux(LdapCtx.java:1848)
at com.sun.jndi.ldap.LdapCtx.c_search(LdapCtx.java:1773)
at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_search(ComponentDirContext.java:386)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:356)
at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.search(PartialCompositeDirContext.java:339)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
at javax.naming.directory.InitialDirContext.search(InitialDirContext.java:267)
at com.aveksa.collector.accountdata.LdapAccountDataReader.getUsers(LdapAccountDataReader.java:617)
at com.aveksa.collector.accountdata.LdapAccountDataReader.access$200(LdapAccountDataReader.java:45)
at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.setContextAndGetUsers(LdapAccountDataReader.java:1195)
at com.aveksa.collector.accountdata.LdapAccountDataReader$AccountDataDirectoryIterator.<init>(LdapAccountDataReader.java:1110)
at com.aveksa.collector.accountdata.LdapAccountDataReader$TestAccountDataIterator.<init>(LdapAccountDataReader.java:1325)
at com.aveksa.collector.accountdata.ADAccountDataReader$ADTestAccountDataIterator.<init>(ADAccountDataReader.java:960)
at com.aveksa.collector.accountdata.ADAccountDataReader.createTestAccountDataIterator(ADAccountDataReader.java:682)
at com.aveksa.collector.accountdata.ADAccountDataReader.createTestAccountDataIterator(ADAccountDataReader.java:62)
at com.aveksa.collector.accountdata.LdapAccountDataReader.getAccountIteratorForTestData(LdapAccountDataReader.java:212)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectData(AccountDataCollector.java:390)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collect(AccountDataCollector.java:302)
at com.aveksa.client.datacollector.collectors.accountdatacollectors.AccountDataCollector.collectTestData(AccountDataCollector.java:277)
at com.aveksa.client.datacollector.framework.DataCollectorManager.collect(DataCollectorManager.java:532)
at com.aveksa.client.component.collector.DefaultCollectorManager.actUpon(DefaultCollectorManager.java:203)
at com.aveksa.client.component.collector.DefaultCollectorManager.handle(DefaultCollectorManager.java:102)
at com.aveksa.client.component.event.DefaultEventManager.handle(DefaultEventManager.java:60)
at com.aveksa.client.datacollector.framework.SimpleEventSource.notifyListeners(SimpleEventSource.java:67)
at com.aveksa.client.component.communication.DefaultCommunicationManager.notifyEvent(DefaultCommunicationManager.java:377)
at com.aveksa.client.component.communication.ChangeListHandler.applyChanges(ChangeListHandler.java:364)
at com.aveksa.client.component.communication.ChangeListHandler.access$300(ChangeListHandler.java:58)
at com.aveksa.client.component.communication.ChangeListHandler$ChangeApplyingRunnable.run(ChangeListHandler.java:275)
at java.lang.Thread.run(Thread.java:745)
Resolution
Workaround
Related Articles
Active Directory Account Collector fails with 'Naming Exception happened' in RSA Identity Governance & Lifecycle 264Number of Views How to update the Active Directory UserAccountConrol (UAC) attribute with the Active Directory AFX Connector in RSA Identi… 240Number of Views The Active Directory Account Collector does not collect the AD Domain Users Group in RSA Identity Governance & Lifecycle 223Number of Views LDAP Authenticator Fails with 'Connection Could Not Be Established with the Directory Server' in RSA Identity Governance &… 1.45KNumber of Views How to verify that RSA Authentication Agent for Windows can perform challenge user lookups across different Active Directo… 471Number of Views
Trending Articles
Quick Setup Guide - Passwordless Authentication in Windows MFA Agent for Active Directory How to import CA signed console cert from AM 8.x primary into a new primary with same FQDN How to manipulate imported RSA SecurID Software Token(s) on an iPhone or iPad device How to 'Trust' the RSA Authentication Manager Security Console Self-Signed Root CA certificate and prevent Cert warnings. How to delete old or pending certificate signing requests for RSA Authentication Manager console or virtual host replaceme…
Don't see what you're looking for?