-
Title
Directory Synchronization fails with "LDAP Filter Error 0xe1000023" when parentheses (round brack -
Description
Entries similar to the following can be seen in DSA.log:
Error 0xe1000023. LDAP filter error. Invalid filter: (&(&(& (mailnickname=*) (| (&(objectCategory=person)(objectClass=user)(homeMDB=CN=Mailbox Store (SERVER-NAME),CN=First Storage Group, CN=InformationStore,CN=Name,CN=Servers,CN=Administrative Group,CN=Administrative Groups,CN=Name,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=domain,DC=example,DC=org)) ))))
-
Cause
Certain object attributes contain one of the following invalid characters:
*
(
)
\
NUL -
Resolution
Investigate the problematic object and either delete it or edit and replace the problematic character with the backslash '\' character followed by the two hexadecimal digits representing the ASCII value of the encoded character, as per http://www.faqs.org/rfcs/rfc2254.html
For example, replace:
'*' with '\2a'
'(' with '\28'
')' with '\29'
'\' with '\5c'
In the scenario here, homeMDB may contain parentheses (round brackets):
(homeMDB=CN=Mailbox Store (SERVER-NAME),CN=First Storage Group...The filter should set as: (homeMDB=CN=Mailbox Store \28SERVER-NAME\29,CN=First Storage Group...
Once the filter set, perform full directory resynchronization.