ARTIFACTORY: Setting up Okta Group LDAP Settings and Handling Invalid Attribute Syntax Error
If you want to set up Okta Group LDAP settings, you can follow these instructions:
- Set the Group Member Attribute to uniqueMember.
- Set the Group Name Attribute to cn.
- In the Filter section, use the following filter: (objectClass=groupofUniqueNames).
- Set the Search Base to ou=groups.
- Check the Search sub-tree option.
However, if you encounter an LDAP error code 21 - Invalid Attribute Syntax while trying to log in or searching for groups for a specific user in the UI for importing groups, it could be because the user does not belong to any group.
In this case, you need to add the user to a group in Okta and then try the login or group search again.
If the error persists, you can try the following steps:
- Check the attribute syntax in Okta for the user and group attributes that you are using.
- Ensure that the user is assigned to the correct group in Okta.
- Check the LDAP server logs to see if there are any errors or warnings related to the search or login operation.