Troubleshooting

Error when accessing the Global.groups in the configuration tree.

The error message:

Error: Can't search LDAP database at server ad.company.com, (using DN cn=krono ad,ou=system users,dc=ad,dc=company,dc=fi): LDAP error(Errorcode "-2")

Cause: Too many user groups in AD.

Solution: Limit the scope of the groups searched by Kronodoc in AD. Add a global group filter in the configuration file ntds_conf.pm (see Chapter Add-on configuration file). Add the $ldap_group_addfilter = "adminDescription=Kronodoc Enabled"; variable or similar. In this example the AD group Kronodoc is enabled and seen by Kronodoc Kronodoc.