When trying to add a new LDAP Identity source to NSX this will fail with a similar error:
NSXapi.log:
2026-03-10T16:41:22.813Z ERROR http-nio-127.0.0.1-7440-exec-2 NsxBaseRestController 79106 SYSTEM [nsx@4413 comp="nsx-manager" errorCode="MP100" level="ERROR" subcomp="manager"] Cannot invoke "java.lang.Boolean.booleanValue()" because the return value of "com.vmware.nsxapi.ldapidentitysources.dto.ActiveDirectoryIdentitySourceDto.getResolveNestedGroups()" is null
java.lang.NullPointerException: Cannot invoke "java.lang.Boolean.booleanValue()" because the return value of "com.vmware.nsxapi.ldapidentitysources.dto.ActiveDirectoryIdentitySourceDto.getResolveNestedGroups()" is null
at com.vmware.nsx.management.ldapidentitysources.converter.ActiveDirectoryIdentitySourceConverter.toDO(ActiveDirectoryIdentitySourceConverter.java:33) ~[?:?]
at com.vmware.nsx.management.ldapidentitysources.converter.LdapIdentitySourceConverter.toDO(LdapIdentitySourceConverter.java:35) ~[?:?]
at com.vmware.nsx.management.ldapidentitysources.facade.LdapIdentitySourcesFacadeImpl.createOrUpdateLdapIdentitySource_aroundBody4(LdapIdentitySourcesFacadeImpl.java:76) ~[?:?]
at com.vmware.nsx.management.ldapidentitysources.facade.LdapIdentitySourcesFacadeImpl$AjcClosure5.run(LdapIdentitySourcesFacadeImpl.java:1) ~[?:?]
at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:149) ~[?:?]
at com.vmware.nsx.management.container.application.FacadeInterceptorHelperImpl.proceed(FacadeInterceptorHelperImpl.java:172) ~[?:?]
at com.vmware.nsx.management.container.application.FacadeInterceptorHelperImpl.proceed(FacadeInterceptorHelperImpl.java:441) ~[?:?]
at com.vmware.nsx.management.common.api.FacadeInterceptorAspect.annotatedMethod(FacadeInterceptorAspect.java:100) ~[?:?]
at com.vmware.nsx.management.ldapidentitysources.facade.LdapIdentitySourcesFacadeImpl.createOrUpdateLdapIdentitySource(LdapIdentitySourcesFacadeImpl.java:72) ~[?:?]
at com.vmware.nsxapi.ldapidentitysources.controller.LdapIdentitySourcesController.createOrUpdateLdapIdentitySource(LdapIdentitySourcesController.java:178) ~[?:?]
at jdk.internal.reflect.GeneratedMethodAccessor6483.invoke(Unknown Source) ~[?:?]
at jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:?]
at java.lang.reflect.Method.invoke(Unknown Source) ~[?:?]
at org.springframework.web.method.support.InvocableHandlerMethod.doInvoke(InvocableHandlerMethod.java:205) ~[?:?]
at org.springframework.web.method.support.InvocableHandlerMethod.invokeForRequest(InvocableHandlerMethod.java:150) ~[?:?]
at org.springframework.web.servlet.mvc.method.annotation.ServletInvocableHandlerMethod.invokeAndHandle(ServletInvocableHandlerMethod.java:117) ~[?:?]
VMware NSX-T
The NSX Manager is in "Pinned Mode" during an active upgrade, which maintains legacy version behavior until the upgrade process successfully completes.
Finish the upgrade, after that add the LDAP identity source