Need help with getting Opefire to work with LDAP

I’m trying to install Openfire on a Windows 2012 (virtual) server. I’m having trouble with the initial setup, on Step 3 of 3 for LDAP integration. The ‘test settings’ appears to be successful for each of the 3 substeps, and shows the 9 groups that I want to use for group mapping, but when I save and continue I got an error which I don’t no how to understand.

Here’s our Windows Active Directory\LDAP structure for the users and the groups used to categorize:

[MasterGroup] (groups A-D are members)
[UserA] (Member of GroupA)
[UserB] (Member of GroupB)
[UserC] (Member of GroupC)
[UserD] (Member of GroupD)


Here is my Opefire Step 1 to 3 of LDAP setup

Step 1 of 3: Connection settings:

LDAP Server
Server Type: "Active Directory"
Host: [Domain Server IP address] Port: [default]
BaseDN: “DC=[Company], DC=[Domain]”

Administrator DN: [companydomain][userid]
(Advanced Settings left default)

TEST Status: Success!

Step 2 of 3: User Mapping
Username Filed: “sAMAccountName”
(Advanced Settings left to default, no search field here)
User Profiles (vCard) - (settings left to default)

TEST: User Mapping successfully draws several users and their appropriate info fields as expected!

Step 3 of 3: Group Mapping
Group field: "CN"
Member Field: "Member"
Description Field: "description"
Advanced Settings
Poxis Mode: NO
Group Filter: “(&(objectClass=group)(cn=[MasterGroup]))”

Test: Group Mapping finds Group Name [MasterGroup] with 9 members (as looks appropriate if I understand the purpose of this filter)

Save and continue generates the following error message:


Problem accessing /setup/setup-admin-settings.jsp. Reason:
Server Error

Caused by:
at org.jivesoftware.openfire.admin.setup.setup_002dadmin_002dsettings_jsp._jspServ ice(
at org.apache.jasper.runtime.HttpJspBase.service(
at javax.servlet.http.HttpServlet.service(
at org.eclipse.jetty.servlet.ServletHolder.handle(
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1669)
at com.opensymphony.module.sitemesh.filter.PageFilter.parsePage( 8)
at com.opensymphony.module.sitemesh.filter.PageFilter.doFilter(
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1652)
at org.jivesoftware.util.LocaleFilter.doFilter(
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1652)
at org.jivesoftware.util.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingF
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1652)
at org.jivesoftware.admin.PluginFilter.doFilter(
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1652)
at org.jivesoftware.admin.AuthCheckFilter.doFilter(
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.ja va:1652)
at org.eclipse.jetty.servlet.ServletHandler.doHandle(
at org.eclipse.jetty.server.handler.ScopedHandler.handle(
at org.eclipse.jetty.server.session.SessionHandler.doHandle( 3)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle( 27)
at org.eclipse.jetty.servlet.ServletHandler.doScope(
at org.eclipse.jetty.server.session.SessionHandler.doScope( )
at org.eclipse.jetty.server.handler.ContextHandler.doScope( 1)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandler
at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.jav a:110)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(
at org.eclipse.jetty.server.Server.handle(
at org.eclipse.jetty.server.HttpChannel.handle(
at org.eclipse.jetty.server.HttpConnection.onFillable(
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob( )
at org.eclipse.jetty.util.thread.QueuedThreadPool$
at Source)

I appreciate any suggestions or comments. Thanks!

Apparently closing the application and starting over again resolved whatever issue it was having… Now, that I’ve gotten past this point, when I view the users, the “Group” field is empty, so apparently I did not understand the ldap.groupSearchFilter… If there are any suggestions I would appreciate it. Thanks!

and apparently that issue was a typo that I missed a dozen times or more… so now how do I close this question?