Failed to find the group membership in the OpenLDAP directory tree error (when the Active Directory group contains special characters)

Technical Articles ID: KB91987
Last Modified: 2023-08-01 06:41:06 Etc/GMT

Environment

ePolicy Orchestrator (ePO) 5.10.0, 5.10 Updates 1–6

Problem

Server_servername.log records the following error during user-based policy calculation (located in the folder ePO_install_directory\DB\Logs):

LdapAPI.cpp(380): LDAP search failed. Error Code='87', DN='DC=example,DC=example,DC=example,DC=net', Filter= '(&(objectCategory=group)(member=Example Group Name (Example,OU=FileSystem,OU=Shortcuts,OU=Shortcut Creation,OU=Administration,OU=Branches,DC=example,DC=example,DC=example,DC=net))', Error string='Filter Error'

#04852 EPOLDAP Failed to find the group membership in the Open Ldap directory tree. Search Filter=(&(objectCategory=group)(member=Example Group Name (Example,OU=FileSystem,OU=Shortcuts,OU=Shortcut Creation,OU=Administration,OU=Branches,DC=example,DC=example,DC=example,DC=net))

Cause

The ePO LDAP query is not properly escaping special characters that are contained within the Active Directory group name. The group name in the log snippet example used above is as follows:

Example Group Name (Example)

The opening parenthesis is the problematic character in this scenario.

Solution

This issue is resolved in ePolicy Orchestrator 5.10.0 Update 7, which is available from the Product Downloads site.

NOTE: You need a valid Grant Number to access the update.

To view other known and resolved issues, see KB90382 - ePolicy Orchestrator 5.10.x Known Issues.

Workaround

Enable Database Mirroring. For more information about why Database Mirroring must be enabled in most ePO environments, see KB84683 - Explanation of how the ePolicy Orchestrator database mirroring feature works.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Failed to find the group membership in the OpenLDAP directory tree error (when the Active Directory group contains special characters)

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

Failed to find the group membership in the OpenLDAP directory tree error (when the Active Directory group contains special characters)

Environment

Problem

Cause

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title