Rally - On-premises: Restricted User Group Filter Query field not showing in 2.0.1


Article ID: 132377


Updated On:


CA Agile Central On Premise (Rally)


If LDAP was not configured, or the Advanced LDAP settings were not used prior to installing the 2.0.1 patch, the "Restricted User Group Filter" and "User Query" fields may not show on the LDAP configuration screen.  Instead, only the basic "Restricted User Group" field is shown.

Because of this, Rally services may fail to start or LDAP logins and synchronization may fail.

Analyzing ALM log file output may show the following errors:
2019-05-16 11:20:43,680 ERROR [LdapAuthenticationProvider] - Invalid LDAP filter
org.springframework.ldap.InvalidSearchFilterException: Empty filter; nested exception is javax.naming.directory.InvalidSearchFilterException: Empty filter; remaining name '/'
Caused by: javax.naming.directory.InvalidSearchFilterException: Empty filter



Release: RLOPPL99000-2.0-Rally-On Premise-Perpetual


1. SSH into the services VM as the ops user
2. Execute the following commands:
replicatedctl app-config set auth_source --value auth_type_internal
replicatedctl app-config set ldap_advanced_search --value 1

3. Use the following command to apply the configurations set above and restart the application services:
replicatedctl app apply-config -a