[JENKINS-65869] Jenkins LDAP Authentication issues for Only New joinees/users

Hi Team,

We are facing issues when new users are login to jenkins and fails with 

 

Caused: org.acegisecurity.ldap.LdapDataAccessException: LdapCallback;[LDAP: error code 32 - 0000208D: NameErr: DSID-031521D2, problem 2001 (NO_OBJECT), data 0, best match of:

'O=MYORGNAME,C=us'

]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031521D2, problem 2001 (NO_OBJECT), data 0, best match of:

'O=MYORGNAME,C=us'

]; remaining name 'employeeNumber=12345678,OU=Associates'

 

This is only for the users who joined recently. Old users are able to login.

Really appreciate quick help on this. 

 

 

PS: Jenkins is able to fetch user details when we are testing LDAP settings without password but only fails when user tries to login with password.

---
Originally reported by nkasturi, imported from: Jenkins LDAP Authentication issues for Only New joinees/users

• status: Open
  
• priority: Critical
  
• component(s): ldap-plugin
  
• resolution: Unresolved
  
• votes: 0
  
• watchers: 1
  
• imported: 2025-12-09
  

Raw content of original issue

Hi Team,


We are facing issues when new users are login to jenkins and fails with 


 


Caused: org.acegisecurity.ldap.LdapDataAccessException: LdapCallback;[LDAP: error code 32 - 0000208D: NameErr: DSID-031521D2, problem 2001 (NO_OBJECT), data 0, best match of:

 'O=MYORGNAME,C=us'

]; nested exception is javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-031521D2, problem 2001 (NO_OBJECT), data 0, best match of:

 'O=MYORGNAME,C=us'

]; remaining name 'employeeNumber=12345678,OU=Associates'


 


This is only for the users who joined recently. Old users are able to login.


Really appreciate quick help on this. 


 


 


PS: Jenkins is able to fetch user details when we are testing LDAP settings without password but only fails when user tries to login with password.

• environment: Redhat 7

Start in the ldap-plugin and compare the LDAP settings used by the password login with the settings test that succeeds without a password. Reproduce the error for a newly joined user and inspect the LDAP error code 32 and remaining name employeeNumber=12345678,OU=Associates. Done would require identifying and fixing the cause, but the issue does not specify an expected code change or test.

Written by the indexing model from the issue text.