IBM Support

Receiving error (WIML4520E: The LDAP operation could not be completed) during MAS user synchronization

Troubleshooting


Problem

If you have a large subtree in your AD and you don't use the BaseDN with an improved filter, you get an error.

Symptom

Receiving error (WIML4520E: The LDAP operation could not be completed. The LDAP naming exception javax.naming.PartialResultException: Unprocessed Continuation Reference(s); remaining name) when configuring MAS with AD MS Server.

Resolving The Problem

There are two ways to solve the problem.
Method 1:
Try changing secure port 636 (SSL port) to 3269 (default port) to use globalcatalogport from LDAP server.
This approach uses the global catalog and avoid issues with Referral between AD and Liberty
However, if any of your AD properties are not in the global AD catalog, you might run into problems
Method 2: (Recommended method)
Use a more specific filter as explained below
Note in the following image that the users are in an OU (Organizational Unit) structure that works as if they are subtrees in LDAP Server. When this structure (subtree) is complex, improve your filter so that it is more accurate.
image-20230330102441-1

For Example:

Instead of using a Base DN with your root "Directory" DC=maximoldap,DC=fyre

Use a more precise filter like OU=Domain Users,DC=maximoldap,DC=fyre

I also used a filter (User Base DN) with all the tree structure from my LDAP Server to optimize the search during user synchronization process and prevent the Referral error due to a poorly written filter.

User Base DN:

OU=4311 App Dev Team 1,OU=4310 Application Development Div,OU=4300 Information Technology,OU=4000 Operations,OU=1000 General Manager,OU=Employees,OU=Domain Users,DC=maximoldap,DC=fyre

On the MAS configuration page, you have something as seen in the following image.

image-20230330103034-3

image-20230330103025-2

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB59","label":"Sustainability Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSRHPA","label":"IBM Maximo Application Suite"},"ARM Category":[{"code":"a8m3p000000hAeeAAE","label":"Maximo Application Suite-\u003ECore"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
20 April 2023

UID

ibm16967225