Error: "LDAP_SYNC_ERROR - [LDAP: error code 32 - 0000208D: NameErr: DSID-03100245, problem 2001 (NO_OBJECT)" when performing LDAP sync in VCD

Products

• VMware Cloud Director

Issue/Introduction

• The below error is observed when trying to sync LDAP in VMware Cloud Director (VCD) UI:
  
  LDAP_SYNC_ERROR - [LDAP: error code 32 - 0000208D: NameErr: DSID-03100245, problem 2001 (NO_OBJECT), data 0, best match of: 'OU=####,DC=###,DC=###' ]
  
  
• Error in LDAP sync
• The following error can be seen in the /opt/vmware/vcloud-director/logs/vcloud-container-info.log:
  
  com.vmware.ssdc.backendbase.ldap.LdapSyncException: LDAP_SYNC_ERROR
       at com.vmware.ssdc.backendbase.usermanagement.LdapSyncHelper$2.run(LdapSyncHelper.java:121)
       at com.vmware.ssdc.backendbase.usermanagement.LdapSyncHelper$2.run(LdapSyncHelper.java:115)
       at com.vmware.vcloud.common.persist.ConversationContextExecutor.execute(ConversationContextExecutor.java:46)
       ...
       at com.vmware.ssdc.backendbase.CAkimbiTask$InvokeChildThread.run(CAkimbiTask.java:152)
Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-03100245, problem 2001 (NO_OBJECT), data 0, best match of:
        'OU=####,DC=###,DC=###'
^@]; remaining name 'OU=####,OU=####,DC=###,DC=###'

Environment

• VMware Cloud Director 10.5.1

Cause

The specified group is in the wrong format and/or is an invalid LDAP object/entry.

Resolution

To resolve the issue, update the Base distinguished name LDAP configuration to include the correct Base distinguished name mentioned in the error above.

i.e. remaining name 'OU=####,OU=####,DC=###,DC=###'

Additional Information

Edit, Test, and Synchronize an LDAP Connection Using Your VMware Cloud Director Service Provider Admin Portal