Next page search results return an error

book

Article ID: 5845

calendar_today

Updated On:

Products

CA Identity Manager CA Identity Governance CA Identity Portal CA Risk Analytics CA Secure Cloud SaaS - Arcot A-OK (WebFort) CLOUDMINDER ADVANCED AUTHENTICATION CA Secure Cloud SaaS - Advanced Authentication CA Secure Cloud SaaS - Identity Management CA Secure Cloud SaaS - Single Sign On

Issue/Introduction

Searching for users (View / Modify / Delete User tasks), we are clicking on > or >> to show the next set of results, we see an exception on the screen:

java.util.NoSuchElementException

Inspecting the application server.log we see errors similar to:

JBWEB000236: Servlet.service() for servlet jsp threw exception: java.util.NoSuchElementException...
Caused by: [facility=4 severity=2 reason=0 status=38 message=No items found]
Organisation dc=ORG,dc=COM cannot be read from the directory.
javax.naming.OperationNotSupportedException: [LDAP: error code 12 - Unavailable Critical Extension]; remaining name 'dc=ORG,dc=COM'

Cause

"LDAP: error code 12 - Unavailable Critical Extension" Indicates that the LDAP server was unable to satisfy a request because one or more critical extensions were not available. Either the server does not support the control or the control is not appropriate for the operation type.

This might be due to maxpagesize setting defined in the Directory.xml (which is used, by default, in newer releases).

Environment

Identity Manager 12.6 (any SP)Identity Manager 14

Resolution

We would need to remove the paging configuration defined for our Corporate Directory:

1. From the management console (immanage), export the corporate directory.

2. Open the corporate directory XML using a file editor, and look for the section where the directory search is defined
<DirectorySearch maxrows="xxxxx" maxpagesize="2000" minsortrules="1"/>

3. Remove the maxpagesize so it shows

<DirectorySearch maxrows="xxxxx" minsortrules="1"/>

4. Reimport the modified  corporate directory XML

Search should work now as expected, as well as scrolling through next page results.

Additional Information

More information on directory search parameters

https://docops.ca.com/ca-identity-manager/12-6-8/EN/configuring/ldap-user-store-management/directory-search-parameters