LDAP repository issues and limitations

This section contains issues and limitations related to LDAP repositories.

A null pointer exception is thrown when search result contains incorrect entries
A Domino LDAP server allows entries with incorrect distinguished names (DN) to be returned in search result.
Error occurs when retrieving external ID from attributes
Follow these steps to troubleshoot if an error or NullPointerException occurs when retrieving external ID from an attribute.
Ensure all threads are not blocked during context pool re-creation
Use the information to ensure all threads that are trying to communicate with the LDAP server are not blocked when the server is down until the read times out.
Attribute configuration
You can customize the attribute configuration to use LDAP attributes other than the default attributes.
Default LDAP mappings
Information about default LDAP mappings is given here.
Domino LDAP Service does not handle multi-valued attribute using LDAP Generalized Time Syntax
When a Domino 6 LDAP server is used with virtual member manager, all the Timestamp data type attributes, that have Generalized Time syntax on LDAP, cannot have multiple values.
Domino LDAP server stores an incorrect value while creating entity with timestamp attribute
When an entity is created with a time stamp attribute, the timestamp value saved in the Domino LDAP server is incorrect.
Domino LDAP server subtree search failure
The Domino LDAP server does not support searching subtrees with multiple level of organizational hierarchy.
Failure to retrieve extended binary attributes from LDAP
An error is displayed when the virtual member manager receives unexpected data from LDAP while retrieving the values of extended binary attributes. To resolve the issue, determine whether LDAP must return the attribute value as binary data. If the value must be returned as binary data, then configure the environment property so that the value is stored as a byte array.
Failure to return search or get entity results
Follow the steps listed here when no search result is returned or an EntityNotFoundException occurs.
Invalid character error occurs during search operation
Follow these steps to troubleshoot if an error occurs, which reports that an invalid character is found during a search operation.
MaxResultsExceededException occurs during LDAP repository search
Follow the steps listed here to troubleshoot when a MaxResultsExceededException occurs.
Microsoft Active Directory LDAP configuration issues
There are certain issues that require special consideration when configuring WebSphere Application Server in the Microsoft Active Directory environment.
NameNotFoundException occurs during LDAP repository search
Follow these troubleshooting steps if a javax.naming.NameNotFoundException occurs during a search in an LDAP repository.
On a Domino LDAP server searching on a French character with a wildcard fails
A search filter containing a French character and an asterisk "*" fails with a Domino directory server.
POSIX groups are not supported
The LDAP repository does not support group membership for POSIX style groups.
Relative distinguished name translation limitation
When two or more LDAP servers are used and the relative distinguished name (RDN) attributes for a particular type of Member are not the same, only one of the RDNs can be used as the virtual member manager RDN.
Some LDAP servers do not support nested entities
Some LDAP servers do not allow all entity types to be created under all entity types.
Unable to log in to LDAP due to special characters
Follow these steps to troubleshoot log in problems due to special characters.
A PartialResultException LDAP exception error occurs while searching for users or groups during a login.
Troubleshooting details for the PartialResultException LDAP exception

Related information

Kerberos bind authentication troubleshooting tips