Having some difficulty in syncing LDAP groups

I have LDAP configured and talking to our A/D server.  I've tried mapping a couple groups but am not getting there.  The Domain Admins group can be ignored for now as it isn't in the area I need to sync.  We have an OU that all our security groups are in the people are members of, usually sorted by project. ideas?

#java.naming.provider.url=ldap://lenny:389/DC=dw,DC=local
java.naming.provider.url=ldap://lenny:389/DC=dw,DC=local ldap://barney:389/DC=dw,DC=local

# Allow to enter anything, but after that format it into 'EXAMPLE\login'.
teamcity.auth.formatDN=dw\\$login$

# LDAP credentials for TeamCity plugin.
java.naming.security.principal=xxxxx
java.naming.security.credentials=xxxxx

# Synchronize both users and groups. Remove obsolete TeamCity users, but don't create new ones automatically.
teamcity.options.users.synchronize=true
teamcity.options.groups.synchronize=true
teamcity.options.createUsers=false
teamcity.options.deleteUsers=true
teamcity.options.syncTimeout=3600000

# Search users from the root: 'DC=dw,DC=local'.
teamcity.users.base=CN=Users
teamcity.users.filter=(objectClass=user)
teamcity.users.username=sAMAccountName

# Search groups from.
teamcity.groups.base=OU=DWSecurityGroups,DC=dw,DC=local
teamcity.groups.filter=(objectClass=group)
teamcity.groups.property.member=member

<!DOCTYPE mapping SYSTEM "ldap-mapping.dtd">
<mapping>
<group-mapping teamcityGroupKey="Domain_Admins" ldapGroupDn="CN=Domain%20Admins,CN=Users,DC=dw,DC=local"/>
<group-mapping teamcityGroupKey="TCADMINS" ldapGroupDn="CN=jira-administrators,OU=DWSecurityGroups,DC=dw,DC=local"/>
</mapping>


[2013-09-10 10:51:00,546]   INFO -     jetbrains.buildServer.LDAP - ------ LdapManager Start ------
[2013-09-10 10:51:00,593]   INFO -     jetbrains.buildServer.LDAP - LDAP properties loaded
[2013-09-10 10:51:00,593]   INFO -     jetbrains.buildServer.LDAP - Starting synchronization session
[2013-09-10 10:51:00,593]   INFO -     jetbrains.buildServer.LDAP - Fetching remote users and groups
[2013-09-10 10:51:00,671]   WARN -     jetbrains.buildServer.LDAP - Total results: 173
[2013-09-10 10:51:00,828]   INFO -     jetbrains.buildServer.LDAP - LDAP groups mapping loaded
[2013-09-10 10:51:00,859]   WARN -     jetbrains.buildServer.LDAP - Search in LDAP: base='OU=DWSecurityGroups,DC=dw,DC=local', filter='(objectClass=group)', scope=2, attributes=[member, sAMAccountName] resulted in error
[2013-09-10 10:51:00,859]   WARN -     jetbrains.buildServer.LDAP - Fatal error while LDAP groups synchronization: No such object ([LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local'
]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local']; remaining name 'OU=DWSecurityGroups,DC=dw,DC=local')
Most common reason for this error: LDAP server couldn't resolve the path specified in base DN.
Please verify the following properties:
  java.naming.provider.url
  teamcity.users.base
  teamcity.groups.base
and make sure the base DN is relative to the root DN (specified in java.naming.provider.url)
[2013-09-10 10:51:00,859]   WARN -     jetbrains.buildServer.LDAP - org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local'
]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local'
]; remaining name 'OU=DWSecurityGroups,DC=dw,DC=local'
[2013-09-10 10:51:00,859]   INFO -     jetbrains.buildServer.LDAP - Last synchronization statistics: created users=0, updated users=0, deleted users=0, remote users=0, matched users=0, created groups=0, updated groups=0, deleted groups=0, remote groups=0, matched groups=0, duration=266ms, errors=[Group with key 'Domain_Admins' is specified in LDAP mapping but cannot be found in TeamCity groups, skipping., Fatal error while LDAP groups synchronization: No such object ([LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local'
]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local'
]; remaining name 'OU=DWSecurityGroups,DC=dw,DC=local')
Most common reason for this error: LDAP server couldn't resolve the path specified in base DN.
Please verify the following properties:
  java.naming.provider.url
  teamcity.users.base
  teamcity.groups.base
and make sure the base DN is relative to the root DN (specified in java.naming.provider.url), org.springframework.ldap.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local'
]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
     'DC=dw,DC=local'
]; remaining name 'OU=DWSecurityGroups,DC=dw,DC=local']

Please sign in to leave a comment.