SYMPTOPM:
LDAP batch import of users and groups do not work when using Strategy 9.x and 10.x Intelligence Server on Linux operating systems with Open LDAP SDK. However, users are able to authenticate using LDAP and import user and group at login works fine.
The following error can be seen in the Authentication Server Trace:
Failure in search based on filter '(objectClass=person)' and search root 'dc=com' (LDAP error 12: Critical extension is unavailable)
CAUSE:This is a known issue in Strategy 9.x. Paging control on Linux with Open LDAP SDK does not work correctly.
ACTION:Strategy will continue to investigate and post updates as soon as they are available.
WORKAROUND:Modify the "LDAP.sh" file located in the /[Strategy_HOME]/env folder and set "MSTR_LDAP_SEARCH_LIMIT" to "0". Then, restart the Intelligence Server.
The Strategy Internal Reference Number for the issue discussed in this technical note is 798767.