Combination View Flat View Tree View
Threads [ Previous | Next ]
Micha Ra
LDAP err 17 empty AttributeDescription - openLDAP export
December 22, 2011 3:53 AM

Micha Ra

Rank: New Member

Posts: 1

Join Date: December 22, 2011

Recent Posts

Hello Everybody,

with Liferay Portal 6.1 RC 1 I have done a successful LDAP setup with connecting to openLDAP with custom attributes mapping:
my file is

All LDAP user attributes are imported and mapped to before created Custom Fields. (Big improvement to LP 6.0.6)
everything works fine until I enable ldap.export.enabled = true.
Afterwards even login fails with the following error:
 211:29:33,871 ERROR [LoginAction:128] com.liferay.portal.ModelListenerException: [LDAP: error code 17 - : empty AttributeDescription]; remaining name 'uid=testuser,ou=people,dc=liferay,dc=com'
 3com.liferay.portal.ModelListenerException: [LDAP: error code 17 - : empty AttributeDescription]; remaining name 'uid=testuser,ou=people,dc=liferay,dc=com'
 4        at com.liferay.portal.model.UserListener.onAfterUpdate(
 5        at com.liferay.portal.model.UserListener.onAfterUpdate(
 6        at com.liferay.portal.model.BaseModelListener.onAfterUpdate(
 7        at com.liferay.portal.service.persistence.impl.BasePersistenceImpl.update(
 8        at com.liferay.portal.service.impl.UserLocalServiceImpl.authenticate(
 9        at com.liferay.portal.service.impl.UserLocalServiceImpl.authenticateByScreenName(
10        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
11        at sun.reflect.NativeMethodAccessorImpl.invoke(
12        at sun.reflect.DelegatingMethodAccessorImpl.invoke(
13        at java.lang.reflect.Method.invoke(
14        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(
15        at com.liferay.portal.spring.transaction.TransactionInterceptor.invoke(
16        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(
17        at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(
18        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(
19        at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(
20        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(
21        at com.liferay.portal.spring.aop.ChainableMethodAdvice.invoke(
22        at com.liferay.portal.spring.aop.ServiceBeanMethodInvocation.proceed(
23        at com.liferay.portal.spring.aop.ServiceBeanAopProxy.invoke(
24        at $Proxy96.authenticateByScreenName(Unknown Source)
25        at com.liferay.portal.service.UserLocalServiceUtil.authenticateByScreenName(
26        at com.liferay.portlet.login.util.LoginUtil.getAuthenticatedUserId(
27        at com.liferay.portlet.login.util.LoginUtil.login(
28        at com.liferay.portlet.login.action.LoginAction.login(
29        at com.liferay.portlet.login.action.LoginAction.processAction(
30        at com.liferay.portal.struts.PortletRequestProcessor.process(
31        at com.liferay.portlet.StrutsPortlet.processAction(
32        at com.liferay.portlet.FilterChainImpl.doFilter(
33        at com.liferay.portal.kernel.portlet.PortletFilterUtil.doFilter(
34        at com.liferay.portlet.InvokerPortletImpl.invoke(
36Caused by: [LDAP: error code 17 - : empty AttributeDescription]; remaining name 'uid=testuser,ou=people,dc=liferay,dc=com'
37        at com.sun.jndi.ldap.LdapCtx.mapErrorCode(
38        at com.sun.jndi.ldap.LdapCtx.processReturnCode(
39        at com.sun.jndi.ldap.LdapCtx.processReturnCode(
40        at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(
41        at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(
42        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(
43        at
44        at
45        at
46        at com.liferay.portal.model.UserListener.exportToLDAP(
47        at com.liferay.portal.model.UserListener.onAfterUpdate(
48        ... 143 more

on LDAP server similar log entry is:
2Dec 22 10:08:48 liferay slapd[7179]: conn=1180 op=1069 RESULT tag=103 err=17 text=: empty AttributeDescription

how do I find out what AttributeDescription is empty? Or did anybody knows what is going wrong?


PS: all hostname settings and logentries are changed to
Jack Chung
RE: LDAP err 17 empty AttributeDescription - openLDAP export
May 4, 2012 4:47 PM

Jack Chung

Rank: New Member

Posts: 19

Join Date: November 30, 2011

Recent Posts

just in case it may help someone else, this error message seems to come up when liferay may be detecting an ldap attribute that it doesn't know what to do with. I think in my case, it was the 'memberOf' attribute. Removing that attribute via the Apache Directory Studio (make sure the Fetch Operational Attributes option in the right-click context menu is turned on) resolved it when i was testing stuff out.

using liferay 6.1 ee, openldap.
Ranga Rao Bobbili
RE: LDAP err 17 empty AttributeDescription - openLDAP export
July 24, 2013 5:41 PM

Ranga Rao Bobbili

Rank: Regular Member

Posts: 152

Join Date: July 20, 2007

Recent Posts

Hi All,

I also faced same issue with Group export(Portal to LDAP), but i resolved my issue by adding description data in the User Group filed section.

Environment: Liferay Portal 6.1 CE GA2 & Oracle Internet Directory 11g

Ranga Rao Bobbili
Adaequare INC

Attachments: userexport.png (169.2k)