Synchronize with Active Directory starting at 'root'

[whowlett]

In my Active Directory tree, all of the OUs, that contain users and groups, are sitting directly off of the domain root. I have tried the attached configuration:

But I get this error in the attached log.

How can I designate the correct SearchBase to start the search at the very root of the AD tree?

Thanks for any help in advance.
Wayne

[eswbitto]

I didn't see any OU's in your config….Example

ldap.synchronization.groupSearchBase=OU\=USERS,DC\=ddwmson,DC\=com


ldap.synchronization.userSearchBase=OU\=USERS,DC\=ddwmson,DC\=com
‍‍‍‍‍‍

Where users would be where your actual users live. Now that could be anything based on how you have your AD tree setup.

[whowlett]

My users are in multiple OUs. Unfortunately, all of the OUs are sitting right on the root of the tree. That is why I was hoping I could set my SearchBase to be the root and let is search through all of them.

[eswbitto]

Yeah I think you are going to have to put each OU in that you want to search.