Skip to main content

Trying to connect Tableau Server (Linux) to Jumpcloud via LDAP.

The connection appears to be succeeding, but I think the query is returning no results.

Unfortunately, I can't tell what ldap query Tableau is using, and JumpCloud logs ssh events and console changes, but not LDAP events, so I can't check there for errors.

I'm guessing the ldap query from tableau isn't handling the "o=1111" parameter used by jumpcloud to designate each account.

 

Here's my identity store JSON:

{

"configEntities":{

  "identityStore": {

   "_type": "identityStoreType",

   "type": "activedirectory",

   "domain": "jumpcloud.com",

   "nickname": "",

   "hostname": "ldap.jumpcloud.com",

   "sslPort": "636",

   "directoryServiceType": "openldap",

   "bind": "simple",

   "username": "uid=(ldap user),ou=Users,o=(jumpcloud organization ID),dc=jumpcloud,dc=com",

   "password": "jumpcloudpassword",

   "identityStoreSchemaType": {

          "userBaseFilter": "(objectClass=inetOrgPerson)",

          "userUsername": "uid",

          "userDisplayName": "displayname",

          "userEmail": "email",

          "userCertificate": "certificate",

          "userThumbnail": "thumbnail",

          "userJpegPhoto": "photo",

          "groupBaseFilter": "(objectClass=groupofNames)",

          "groupName": "groupname",

          "groupEmail": "groupemail",

          "groupDescription": "groupdescription",

          "member": "member",

          "distinguishedNameAttribute": "",

          "serverSideSorting": "false",

          "rangeRetrieval": "false"

          }

    }

  }

}

 

And here's the error from tabadmincontroller, specifically /var/opt/tableau/tableau_server/data/tabsvc/logs/tabadmincontroller/tabadmincontroller_node1-0.log

2018-08-23 18:29:43.233 +0000 29511 qtp22864481-21 : INFO  com.tableausoftware.ldap.LdapConnectionFactory - Success connecting to Domain Controller:ldap://ldap.jumpcloud.com:636

2018-08-23 18:29:43.237 +0000 29511 qtp22864481-21 : ERROR com.tableausoftware.tabadmin.webapp.impl.IdentityStoreService - IdentityStoreService failure:com.tableausoftware.domain.ldap.LdapSearchException: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name

'DC=jumpcloud,DC=com' (errorCode=100081)

 

I also tried the "userBaseDN" and "groupBaseDN" parameters mentioned elsewhere in the forum, but the error message did not change.

Thanks for any help you can provide, and free mini JumpCloud accounts are available if you want to replicate the problem.

5 answers
  1. Aug 27, 2018, 8:01 PM

    I believe some changes to OpenLDAP binding were added in 2018.1.3 and 2018.1.4, would you be able to test on this version? If you still encounter the error on the most recent version, I'd recommend opening a case with Tableau Technical Support to look deeper.

0/9000