External LDAP Authentication Fails With "Error during synchronization"

org.springframework.security.authentication.AuthenticationServiceException: Error during synchronization

What cause the issue and how to fix it?

Solution

Reviwing complete jasperserver.log log file revealed another error which caused synchronization issue:

java.lang.RuntimeException: com.jaspersoft.ji.license.LicenseMultiTenancyNotSupportedException: Your license doesn't allow access to more than one organization. Please contact Jaspersoft Technical Support

As it turned out, customer used a Professional license without multi-tenancy support, but external authentication config file was setup to use mutli-tenancy feature.

As stated in TIBCO JasperReports Server Authentication Cookbook, if you have a commercial JasperReports Server deployment that does not implement multiple organizations, applicationContext-externalAuth-LDAP-mt.xml  should be configured accordingly to map external users to a default organization:

https://community.jaspersoft.com/documentation/tibco-jasperreports-server-authentication-cookbook/v720/mapping-user-organization#map_single_org

Once the customer updated the config file per the doc, he managed to login to TIBCO JasperReports^® Server with LDAP users.

AS-20191121, case 01815577