Log Realm is in user-dn-template mode: – How To Solve Related Issues

Log Realm is in user-dn-template mode: – How To Solve Related Issues

Opster Team

Jan-20, Version: 1.7-8.0


Before you begin reading this guide, we recommend you try running the Elasticsearch Error Check-Up  which can resolve issues causing many log errors (free and no installation required)


This guide will help you check for common problems that cause the log “Realm is in user-dn-template mode:” to appear. It’s important to understand the issues related to the log, so to get started, read the general overview on common issues and tips related to the Elasticsearch concepts: plugin.

Advanced users might want to skip right to the common problems section in each concept or try running the Check-Up which analyses ES to discover the cause of many errors and provides suitable actionable recommendations. 

Log Context

Log “Realm [{}] is in user-dn-template mode: [{}]” classname is LdapSessionFactory.java
We extracted the following from Elasticsearch source code for those seeking an in-depth context :

         userDnTemplates = LdapSessionFactorySettings.USER_DN_TEMPLATES_SETTING.get(settings).toArray(Strings.EMPTY_ARRAY);
        if (userDnTemplates.length == 0) {
            throw new IllegalArgumentException("missing required LDAP setting ["
                    + RealmSettings.getFullSettingKey(config; LdapSessionFactorySettings.USER_DN_TEMPLATES_SETTING) + "]");
        logger.info("Realm [{}] is in user-dn-template mode: [{}]"; config.name(); userDnTemplates);
        groupResolver = groupResolver(settings);
        metaDataResolver = new LdapMetaDataResolver(settings; ignoreReferralErrors);


Find Configuration Errors

Try The Tool