User bundle assingments lost due to invalid LDAP group name

  • 7016831
  • 11-Sep-2015
  • 11-Sep-2015

Environment

Novell ZENworks Configuration Management 11.4

Situation

User bundle assignments are not flowing down to workstations.

ERROR (from agent zmd-messages.log):
[AssignmentManager] [] [Error returned from Web Service] 
[AssignmentManager] [] [GENERAL_EXCEPTION (getEffectiveAssignments

ERROR (from services-messages.log):

[ERROR] [09/09/2015 14:12:32.940] [1116] [ZENService] [70636] [] [Assignment Web Service] [AssignmentService.GENERAL_EXCEPTION] [The assignment web service encountered the following exception while handling "getAssignmentChains" request for guid: guid] [] [] [] [ZENServer]
[TRACE] [09/09/2015 14:12:32.971] [1116] [ZENService] [70636] [] [Assignment Web Service] [] [com.novell.zenworks.datamodel.exceptions.ObjectNotFoundException: guid

[TRACE] [09/09/2015 14:13:54.997] [1116] [ZENService] [80704] [] [ZENInitialLdapContext] [Handle Naming exception invoked : javax.naming.InvalidNameException: CN=groupname
CNF:guid ((LDAP: error code 34 - 0000208F: NameErr: DSID-031001F7, problem 2006 (BAD_NAME), data 8349, best match of:
'CN=groupname
CNF:guid,DC=domain,DC=com

Resolution

Workaround:

From the services-messages.log find the InvalidNameException to determine the group with the invalid name.

Rename or or delete the group name in the user source that is generating the LDAP exception to use proper format for LDAP query.  Example no carriage return/line feed or other illegal characters in the group name

Status

Reported to Engineering