Error: "AddressNotUniqueException: Address <address> is not unique. The following entries share the same email address:"

Products

• Messaging Gateway

Issue/Introduction

Directory Data Services (DDS) lookup is causing an error of 'Address <email address> is not unique. The following entries share the same email address:'

Either a DDS error, alert notificaiton, or both can occur.

• DDS error: com.symantec.sms.dds.api.exception.AddressNotUniqueException: Address
• Alert notification is as follows:

======================= ALERT NOTIFICATION ================================              

The Directory Data Service status is as follows:


Host : Local Host

Date : Monday, Apr 05, 2010 02:34:56 PM EEST Status : A directory data integrity error has occurred. An email address is associated with more than one directory entry.

Please check the directory data service logs for more information. 

Cause

Multiple LDAP/Active Directory sources are being used for redundancy and/or contain common information such as name or email address.

By design, Messaging Gateway requires that email address searches in the directory return only a single object / distinguished name for most directory data source functions. Multiple LDAP objects with the same mail or proxyAddresses attribute will cause errors with Authentication, Address Resolution, and Routing data sources.

The Recipient Validation function does not require that an email address have a unique entry in the directory, only that the search not return no results. 

 

Resolution

Multiple Data Sources

Configuring multiple data source replicas or mirrors as redundant data sources for Messaging Gateway is generally not recommended as SMG builds a single, unified view of all configured data sources which can result in duplicate search results if multiple data sources have the same data.

• If Recipient Validation is being used, it may be configured for the redundant sources
• If any other DDS function is being used, they can only be configured on a single data source at a time

Single Data Source

• Review the DDS logs to get a list of the LDAP distinguished names (DN) of the entries with matching email addresses
• Modify the directory such that the extraneous search results are outside the search scope / BaseDN of the LDAP search configuration, or
• Modify the DDS configuration in Administration > Directory Integration such that the base distinguished name (BaseDN) for the LDAP search does not include multiple enties.

 

 

 

Additional Information

From the Administrator Guide, Adding a data source:

"For authentication, address resolution, or routing data sources, the results that are returned must be unique. Therefore you cannot have identical or overlapping (where two data sources can potentially return the same result) data sources. If the Directory data integrity errors alert is configured on the Alerts page, that alert is triggered when this condition is detected."