LDAP: error code 12 - Unavailable Critical Extension

Products

• Clarity PPM On Premise

Issue/Introduction

When executing the LDAP - Synchronize New and Changed Users job from Clarity, it fails with the below error message.

          LDAPDirectoryService.importUsers():[LDAP: error code 12 - Unavailable Critical Extension]  

 

 

Environment

Release: All Supported Clarity Release with LDAP integration 
Component: STUDIO

Cause

LDAP_UNAVAILABLE_CRITICAL_EXTENSION: Indicates that the LDAP server was unable to satisfy a request because one or more critical extensions were not available. Either the server does not support the control or the control is not appropriate for the operation type.

Resolution

Clarity application LDAP code fetches the search results in "batches" (pagination). This allows us to get a large number of user set from the directory servers. In order to do this we do use some control extensions. One way to instruct our code to not use this new "pagination" technique is to set the Batch Size parameter to 0. When it is set to 0 clarity do not perform any pagination and fetch the results in old fashioned way - all in one shot.

NOTE: Making this change may impact performance of the job

1. Log into CA PPM System Administration (CSA) application
2. Navigate to Properties, Security Tab
3. Set the Batch Size = 0
4. Stop and restart both the Application and Background Services 

 

Additional Information

Refer to the current Clarity System Administration Guide, Manage Security Section for more details on integrating CA Clarity PPM with Lightweight Directory Access Protocol (LDAP) Servers.

Reference LDAP Configuration and Troubleshooting Guide