We have a user that our corporate portal cannot fetch the groups for from AD.
On the portal logs we see this error:
javax.naming.PartialResultException: Unprocessed Continuation Reference(s) remaining name ”
I’ve Googled for the error and the best symptoms that seem to describe this case and how to resolve it are here: http://www-01.ibm.com/support/docview.wss?uid=swg21232921
Assuming we don’t want to change the configuration just because of one user but to amend the data of this specific user can someone please explain me how can recognize this when examining the user’s record in the AD? Is this something to do with his groups assignments and if yes then what should I look for?
Check out this link for a bit more data on what your API is telling you: http://www.jspwiki.org/wiki/ActiveDirectoryIntegration
I’m not an expert on this API but can explain at least what I think is going on based upon that doc & knowledge of what AD is doing. 🙂
AD returns what are called “referrals” when you do searches that have naming contexts outside of this local server/search but in the logical scope of your request. This is per RFC request. Think of a referral as a hint to you the app that there might be more data out there…ie, that is, the AD server is saying “here are the results I have for you but, you should know, there is someone else that might have more…go here to find out.”
Referrals aren’t an “error” they are a hint to the app.
It seems that your LDAP API is throwing an exception when encountering them. Per the docs I referenced above, it looks like you can either swallow them or chase the referral to find out if there is more data.