Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

LDAP realm unable to view group members

0 views
Skip to first unread message

Charl Naude

unread,
May 14, 2002, 5:03:06 PM5/14/02
to

My environment is Weblogic 6.1 and iPlanet 4.1 LDAP server.

Using the WL console I am able to view the list of users and groups from LDAP, but
is unable to see the group members on the group list.

The ldaprealm->groups are set up as follow:
Group DN: dc=com,dc=company,dc=blue,ou=Groups
Group name Attribute: cn
Group context: (checked)
Group username attribute: member (also tried uniqueMember)

Any help with this problem will be appreciated.

Charl Naude

unread,
May 14, 2002, 7:40:35 PM5/14/02
to

I have some additional information that hopefully can help identifying the problem:

The ldaprealm->groups are now set set up as follow:


Group DN: dc=com,dc=company,dc=blue,ou=Groups
Group name Attribute: cn

Group context: (un-checked)
Group username attribute: uniqueMember

The reason for setting un-checked and uniqueMember is that i printed a group object
and got the following result:

{objectclass=objectClass: top, groupofuniquenames, description=description: everyone
in app, uniquemember=uniqueMember: uid=system,ou=Special Users,dc=blue,dc=company,dc=com,
uid=000001,ou=People, dc=blue,dc=company,dc=com, uid=000002,ou=People, dc=blue,dc=company,dc=com,
cn=cn: everyone}

After using the new setting, I was unable to start my WL server. Following is the
error I received:

<May 14, 2002 3:51:50 PM MST> <Emergency> <Server> <Unable to initialize the ser
ver: 'Fatal initialization exception
Throwable: java.lang.NullPointerException
java.lang.NullPointerException
at weblogic.security.ldaprealmv1.LDAPDelegate.getAttributeFromDN(LDAPDel
egate.java:301)
at weblogic.security.ldaprealmv1.LDAPDelegate.addGroupMember(LDAPDelegat
e.java:620)
at weblogic.security.ldaprealmv1.LDAPDelegate.getGroupMembers(LDAPDelega
te.java:584)
at weblogic.security.ldaprealmv1.LDAPDelegate.getGroup(LDAPDelegate.java
:533)
at weblogic.security.ldaprealmv1.LDAPDelegate.getGroup(LDAPDelegate.java

With the error it seems that at least WL is trying to process the memebers for the
group but is unable to do it.

Again any help in this matter will be appreciated.

Charl Naude

unread,
May 14, 2002, 8:09:49 PM5/14/02
to

Some corrections to clarify things.
My environment is WL 6.1 and iPlanet 5.1
The LDAP realm I'm using is V1
...........
thanks

kirann

unread,
May 22, 2002, 7:57:41 PM5/22/02
to
from 61sp3 onwords.. weblogic iterates the groups for members too!

"Jerry" <nos...@youwish.com> wrote in message
news:3CE2F472...@youwish.com...
> Hi Charl,
>
> What you're seeing is expected behavior.
> WebLogic won't iterate through group membership on the groups page for
performance reasons.
> Even though you don't see the members of your groups, they're in there
>
> Cheers,
> Joe Jerry

0 new messages