PartialResultException when authenticating over LDAP with Acegi and Grails

I'm trying to setup our new Grails application to authenticate via LDAP. From the logs we can see that Acegi is binding to the LDAP store, then is able to find the user given the correct credentials, and开发者_C百科 finally begins searching for roles.

The authentication fails due to a PartialResultException.

I'm aware that the default LDAP provider in Acegi has an option to ignore PartialResultExceptions, but I'm not exactly sure how to turn that on in Grails.

I found a solution to my problem at the SpringSource forums

Basically I needed to be more specific with the Group Search Base. Adding in a more specific OU fixed the problem.