Could not find a value for the BaseSubstitutionProperty on the User result Skip to main content
https://support.okta.com/help/answers?id=9062a000000xablqa0&refurl=http%3a%2f%2fsupport.okta.com%2fhelp%2fanswers
How satisfied are you with the Okta Help Center?
Thank you for your feedback!
How satisfied are you with the Okta Help Center?
1
2
3
4
5
Very Dissatisfied
Very satisfied
Enter content less than 200 characters.
Ask Search:
Grace MaherGrace Maher 

Could not find a value for the BaseSubstitutionProperty on the User result

Hey Guys

So were setting up the LDAP agent using Jumpbox, and following this guide (here).

On the agent set up page, were getting the below error:
Could not find a value for the BaseSubstitutionProperty on the User result

I have checked all the details and they are correct, and the logs dont offer much insight. I'll post everything I have below:

[ 2017-08-10 14:04:47.850 ] [ pool-1-thread-1 ] [ INFO  ] [LdapAgent:187] - Running actionType=USER_AUTH_AND_UPDATE in className=UserAuthAndUpdateActionHandler
[ 2017-08-10 14:04:47.850 ] [ pool-1-thread-1 ] [ INFO  ] [LdapDirectoryAdapter:157] - Last scan=null
[ 2017-08-10 14:04:47.850 ] [ pool-1-thread-1 ] [ INFO  ] [UnboundIDLdapClient:277] - LDAP query from Okta: (&(objectclass=inetorgperson)(mail=ldapsvc@COMPANYNAMEREDACTED.com))
[ 2017-08-10 14:04:47.850 ] [ pool-1-thread-1 ] [ INFO  ] [WrappedConnectionPool:71] - Search DN=ou=Users,o=598c4c311c1b94a7363f1efa,dc=jumpcloud,dc=com
[ 2017-08-10 14:04:47.850 ] [ pool-1-thread-1 ] [ INFO  ] [WrappedConnectionPool:72] - Search Filter=(&(objectclass=inetorgperson)(mail=ldapsvc@COMPANYNAMEREDACTED.com))
[ 2017-08-10 14:04:47.851 ] [ pool-1-thread-1 ] [ INFO  ] [LdapUtil:66] - [LDAP =>ldap.jumpcloud.com:636] Operation=SearchRequest BaseDN=ou=Users,o=598c4c311c1b94a7363f1efa,dc=jumpcloud,dc=com Filter=(&(objectclass=inetorgperson)(mail=ldapsvc@COMPANYNAMEREDACTED.com)) Scope=SUB Attributes={givenName,distinguishedname,sn,mail,objectClass,uid,title,manager,streetAddress,l,st,postalCode,physicalDeliveryOfficeName,departmentNumber,telephoneNumber,mobile,preferredLanguage,postalAddress,employeeID,employeeNumber,uid,member,pwdlockout,dn,memberof}
[ 2017-08-10 14:04:47.851 ] [ Thread-14 ] [ INFO  ] [LdapAgent:161] - Fetching Action
[ 2017-08-10 14:04:47.851 ] [ Thread-14 ] [ INFO  ] [LdapRestClient:462] - GEThttps://COMPANYNAMEREDACTED.okta.com/api/1/internal/app/agent/ldap_sun_one/0oa11rqacBbJCXDf52p6/agent/a5311rn7dWYEWo0cf2p6/nextAction?agentVersion=5.3.12
[ 2017-08-10 14:04:48.033 ] [ pool-1-thread-1 ] [ INFO  ] [WrappedConnectionPool:93] - Paged search: SearchResultEntry=SearchResult(resultCode=0 (success), messageID=2, entriesReturned=1, referencesReturned=0, responseControls={SimplePagedResultsControl(pageSize=0, isCritical=false)})
[ 2017-08-10 14:04:48.033 ] [ pool-1-thread-1 ] [ INFO  ] [LdapDirectoryAdapter:205] - Search Response Entries: size=1
[ 2017-08-10 14:04:48.036 ] [ pool-1-thread-1 ] [ INFO  ] [LdapRestClient:232] - POST initiated with result status=FAILURE, actionType=USER_AUTH_AND_UPDATE, actionId=ADS12bngmtQNgVBZb2p6, diagnostic message=, error code=, matched dn=, message=Could not find a value for the BaseSubstitutionProperty on the User result, result code=, vendor=OPEN_LDAP
[ 2017-08-10 14:04:48.037 ] [ pool-1-thread-1 ] [ INFO  ] [LdapRestClient:462] - POSThttps://COMPANYNAMEREDACTED.okta.com/api/1/internal/app/agent/ldap_sun_one/0oa11rqacBbJCXDf52p6/agent/a5311rn7dWYEWo0cf2p6/actionResult
[ 2017-08-10 14:04:48.490 ] [ pool-1-thread-1 ] [ INFO  ] [LdapRestClient:264] - POST completed. Time Taken=0:00:00.454

Kind Regards
Paul AbeseiPaul Abesei (Okta, Inc.)
Hello Grace,

Please open a ticket on our support page (https://support.okta.com/help).
David McCluskeyDavid McCluskey
It would sure be nice if you guys posted the fixes for this.  I had it too in April, but the emails nor case details show what the fix was.  What is the purpose of a knowledge base if you don't use actual use cases and support problems as examples.   Would save everyone some time.

We have this issue in another tenant and can't remember how we fixed it.