Submit Feedback
Legacy Knowledge Base
Published Jun. 30, 2025

LDAP import PermissionChecker not initialized

Written By

Emma Carr-Gardner

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

  • When importing users by Groups and enabling ‘Creating Roles on Import’, the roles and groups will be created/imported, but the users are not imported.

  • Error reads PermissionChecker not initialized after scheduled LDAP import.

  • I’m connected to my LDAP server, all tests are working, but I’m unable to import users.

Steps to reproduce

  1. In a 2023.Q4.6 bundle 
    1. navigate to instance settings > LDAP > Servers
  2. Connect to your LDAP
  3. Within your directory:
    1. Create two groups
    2. Assign members to the groups
  4. Test your configurations:
    1. Connection,
    2. Users,
    3. Groups and save your configurations.
  5. Click on “Import”, 
    1. enable the import 
    2. enable “Create Role per Group on Import”.

Actual Results:

The Groups, and Roles will be created, but the users will not be imported, check the logs and verify the error matches the one below. 

ERROR [liferay/scheduled_user_ldap_import-2][LDAPUserImporterImpl:1015] Unable to import group CN=Test1: null:null:{cn=cn: Test1}
com.liferay.portal.kernel.exception.ModelListenerException: com.liferay.portal.kernel.security.auth.PrincipalException: PermissionChecker not initialized

Expected Results:
The users should be imported by groups, with Roles created per group.

Environment

  • Liferay DXP 2023.Q4.6

Resolution

  • A manual workaround: after the Roles and Groups are created, you can manually connect the Groups and the Roles (Assignees). Then the import will work without issue.
  • Upgrading to a later version of Liferay DXP where the behavior is no longer present.
  • Request a hotfix built on https://liferay.atlassian.net/browse/COMMERCE-13166

Additional Information

Did this article resolve your issue ?
Legacy Knowledge Base
Did this article resolve your issue ?