Hi,
After an upgrade from Ambari 2.0 to 2.1, The LDAP sync not working any more, i have this error:
# ambari-server sync-ldap --groups groups.txt
Using python /usr/bin/python2.6
Syncing with LDAP...
Enter Ambari Admin login: admin
Enter Ambari Admin password:
Syncing specified users and groups...ERROR: Exiting with exit code 1.
REASON: Caught exception running LDAP sync. [LDAP: error code 12 - Unavailable Critical Extension]; nested exception is javax.naming.OperationNotSupportedException: [LDAP: error code 12 - Unavailable Critical Extension]; remaining name dc=******
More info in “/var/log/ambari-server/ambari-server.log” :
31 Jul 2015 15:54:12,385 INFO [pool-6-thread-1] AmbariLdapDataPopulator:612 - Reloading properties
31 Jul 2015 15:54:12,400 INFO [pool-6-thread-1] LdapTemplate:1262 - The returnObjFlag of supplied SearchControls is not set but a ContextMapper is used - setting flag to true
31 Jul 2015 15:54:12,602 FATAL [pool-6-thread-1] AbstractRequestControlDirContextProcessor:186 - No matching response control found for paged results - looking for 'class javax.naming.ldap.PagedResultsResponseControl
31 Jul 2015 15:54:12,603 ERROR [pool-6-thread-1] LdapSyncEventResourceProvider:429 - Caught exception running LDAP sync.
org.springframework.ldap.OperationNotSupportedException: [LDAP: error code 12 - Unavailable Critical Extension]; nested exception is javax.naming.OperationNotSupportedException: [LDAP: error code 12 - Unavailable Critical Extension]; remaining name dc=******
See below the log in my LDAP server.
This LDAP query work fine:
[...]
[31/Jul/2015:16:53:22 +0200] conn=360563 op=1 msgId=2 - SRCH base="dc=*******" scope=2 filter="(&(objectClass=posixGroup)(cn=group1))" attrs=ALL
[31/Jul/2015:16:53:22 +0200] conn=360563 op=1 msgId=2 - RESULT err=0 tag=101 nentries=1 etime=0.001200
[...]
But This one don’t work, it’s strange, there is no attributes in the filter ?!
[...]
[31/Jul/2015:16:53:22 +0200] conn=360564 op=1 msgId=2 - SRCH base="dc=*********" scope=2 filter="(&(objectClass=posixAccount)(|(dn=oozie)(uid=oozie)))", unsupported critical extension
[31/Jul/2015:16:53:22 +0200] conn=360564 op=1 msgId=2 - RESULT err=12 tag=101 nentries=0 etime=0.000280
[...]
Please could you help me ? 
It worked fine in Ambari 2.0, my LDAP server is Oracle Directory Server Enterprise Edition 11G.
Regards,
STAMS