Hi. I've read ll the documentation and tried a whole bunch of configuration permutations prior to coming here so bear with me.
Can someone please help me figure out LDAP settings for TeamCity?
We have Windows 2008 AD Servers, I am running TeamCity 8.1.5 on Windows Server 2008 R2 (64 bit)
Here is my AD structure:
OU=Our Security Groups
Group=CI_Users This group has all the users I want to sync with TeamCity as users
Group=CI_Admins This group has all the users I want to sync with TeamCity as admins
I want to synchronize all the users in the CI_Users group. The actual location for those users are all over the map in our domain (don't ask I didn't set it up and I can't change it, although I do have full reign over the ALM OU).
Here is what I've tried for configuration (that seemed to make the most progress):
java.naming.provider.url=ldap://server.mycompany.com:389/OU=ALM,OU='Our Security Groups',DC=mycompany,DC=com
# Synchronize both users and groups. Remove obsolete TeamCity users, but don't create new ones automatically.
# Search users from the root: 'DC=example,DC=com'.
# Search groups from 'CN=groups,DC=example,DC=com'.
I get this error when I configure it this way:
Fatal error while LDAP users synchronization: Operations error (Uncategorized exception occured during LDAP processing; nested exception is javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-031007DB, problem 5012 (DIR_ERROR), data 0 ]; remaining name 'CN=CI_Users')
org.springframework.ldap.UncategorizedLdapException: Uncategorized exception occured during LDAP processing; nested exception is javax.naming.NamingException: [LDAP: error code 1 - 000020D6: SvcErr: DSID-031007DB, problem 5012 (DIR_ERROR), data 0 ]; remaining name 'CN=CI_Users'
I've tried a lot of different tweaks but none seem to work. But I know LDAP works because if I don't specify a specific OU and just the base (mycompany.com) it synchronizes that whole dang AD tree (and takes like 45 minutes).
I'm SURE someone has AD set up like this and sync'd with TeamCity- can someone help me out?