Next page search results return an error

Document ID : KB000005845
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

Searching for users (View / Modify / Delete User tasks), we are clicking on > or >> to show the next set of results, we see an exception on the screen:

java.util.NoSuchElementException

Inspecting the application server.log we see errors similar to:

JBWEB000236: Servlet.service() for servlet jsp threw exception: java.util.NoSuchElementException...
Caused by: [facility=4 severity=2 reason=0 status=38 message=No items found]
Organisation dc=ORG,dc=COM cannot be read from the directory.
javax.naming.OperationNotSupportedException: [LDAP: error code 12 - Unavailable Critical Extension]; remaining name 'dc=ORG,dc=COM'

Environment:
Identity Manager 12.6 (any SP)Identity Manager 14
Cause:

"LDAP: error code 12 - Unavailable Critical Extension" Indicates that the LDAP server was unable to satisfy a request because one or more critical extensions were not available. Either the server does not support the control or the control is not appropriate for the operation type.

This might be due to maxpagesize setting defined in the Directory.xml (which is used, by default, in newer releases).

Resolution:

We would need to remove the paging configuration defined for our Corporate Directory:

1. From the management console (immanage), export the corporate directory.

2. Open the corporate directory XML using a file editor, and look for the section where the directory search is defined
<DirectorySearch maxrows="xxxxx" maxpagesize="2000" minsortrules="1"/>

3. Remove the maxpagesize so it shows

<DirectorySearch maxrows="xxxxx" minsortrules="1"/>

4. Reimport the modified  corporate directory XML

Search should work now as expected, as well as scrolling through next page results.

Additional Information:

More information on directory search parameters

https://docops.ca.com/ca-identity-manager/12-6-8/EN/configuring/ldap-user-store-management/directory-search-parameters