OpenShift LDAP group sync - filter does not start with an '('
Issue
- When trying to create and sync groups and users using LDAP sync method, get this error message about parenthesis
# oadm groups sync --whitelist=whitelist.txt --sync-config=ldap.yaml --confirm
error: validation of LDAP sync config failed: groupsQuery.filter: Invalid value: "objectclass=groupofuniquenames": invalid query filter: LDAP Result Code 201 "": ldap: filter does not start with an '('
See 'oadm groups sync -h' for help and examples.
- Snippet of LDAP sync config file does not contain parentheses
groupsQuery:
baseDN: "ou=tst1,dc=example,dc=company,dc=com"
scope: sub
derefAliases: never
filter: objectclass=groupofuniquenames
pageSize: 0
Environment
- Red Hat OpenShift Container Platform
- 3.X
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.