KNOWLEDGE BASE

User import with blank UPN name will fail


Published: 20 Apr 2016
Last Modified Date: 29 Aug 2017

Issue

User import with blank UPN name in Active directory will fail with following error message:
 
2016-04-18 08:55:30.115 -0700 (Default,hxu,pc3Y9oBTZWl2vABRYI49l60zGoCMXCPi,VxUDcgoXbgsAAfEcedYAAAFd) catalina-exec-54 : ERROR com.tableausoftware.api.webclient.util.BatchedActionExecutor - Exception raised by call target for key [username]: String index out of range: -1
java.lang.StringIndexOutOfBoundsException: String index out of range: -1
    at java.lang.String.substring(String.java:1967)
    at com.tableausoftware.winldap.WinLdapUser.<init>(WinLdapUser.java:39)
    at com.tableausoftware.winldap.WinLdapSearchService.findUser(WinLdapSearchService.java:257)
    at com.tableausoftware.domain.user.service.SyncWithActiveDirectoryLogic.syncUser(SyncWithActiveDirectoryLogic.java:333)
    at com.tableausoftware.domain.user.service.UserManagementService.importUserFromActiveDirectory_aroundBody80(UserManagementService.java:982)
    at com.tableausoftware.domain.user.service.UserManagementService$AjcClosure81.run(UserManagementService.java:1)
    at org.aspectj.runtime.reflect.JoinPointImpl.proceed(JoinPointImpl.java:221)
....

Environment

  • Tableau Server 9.2.2 - 9.2.6

Resolution

There are 2 possible solutions:

Option 1

Upgrade to 9.1.9 or 9.2.7.

Option 2

Manual workaround: Fill in the blank UPN (User Principal Name formatted as an email address) for users in AD and then sync the group.

Cause

New users with empty UPN cannot be imported
Did this article resolve the issue?