Users not retrieved when connecting to an LDAPS server with Advanced LDAP
Hello,
We are facing an issue when trying to connect to an LDAPS server via an Advanced LDAP connection. Currently we are using an Active Directory connection to connect to the LDAP server which works perfectly fine. However, due to company policies, we need to start using a secure LDAP (LDAPS) service.
The sync finishes successfully so the connection to the LDAPS server is happening, however no users or groups are retrieved from the server as per the log below.
5081 20230413T095524.990+0000 INFO HOSTNAME UserManagement.Repository.Repository.Users.UserSyncEngine 25 cc852403-8871-4949-a61f-62f1bc8786a6 USERNAME Started synchronizing all users for 2f47fcf9-ae5a-42f4-a537-421fce67c6ac cc852403-8871-4949-a61f-62f1bc8786a6
5082 20230413T095524.990+0000 INFO HOSTNAME UserManagement.Repository.Repository.Users.SyncUsersWorker 25 1532b1b6-f8e6-4470-9875-b9c70b955f1c USERNAME Started syncing users 1532b1b6-f8e6-4470-9875-b9c70b955f1c
5083 20230413T095525.225+0000 INFO HOSTNAME UserManagement.Repository.Repository.Users.Support.SyncUserRepository 25 6558a938-89b3-4d07-9e42-22781ed1052c USERNAME Database done with 0 users and 0 groups in user directory (DOMAIN, 2f47fcf9-ae5a-42f4-a537-421fce67c6ac) 6558a938-89b3-4d07-9e42-22781ed1052c
5084 20230413T095525.334+0000 INFO HOSTNAME UserManagement.Repository.Repository.Users.SyncUsersWorker 25 a0cf6144-3024-4041-974c-965e32a52141 USERNAME Ended saving users in repository a0cf6144-3024-4041-974c-965e32a52141
5085 20230413T095525.334+0000 INFO HOSTNAME UserManagement.Repository.Repository.Users.UserSyncEngine 25 4aca1f56-4362-4b10-a66a-696e7170bc60 USERNAME Finished synchronizing all users for 2f47fcf9-ae5a-42f4-a537-421fce67c6ac 4aca1f56-4362-4b10-a66a-696e7170bc60
When using the exact same setting an an LDAP browser, I can see the list of users available in the particular directory. Below are the settings used in the Advanced LDAP connector.
User directory name: the directory name
Host: ldaps.xxxxx.com:636
Username: email address
Password: password
Timeout(seconds): 500
BasDN: OU=AADDC Users,DC=xxxxx,DC=com
All other setting were left to the default values, so we're not sure if we need to do some changes also to some other configs.
