ACF2 LDS getting message CAS2286E LDAP request failed. RC: 10 User DN:

Products

• ACF2
• ACF2 - z/OS
• ACF2 - MISC
• LDAP SERVER FOR Z/OS

Issue/Introduction

Trying to use ACF2 LDS to replicate LogonIDs to a local test AD server, now always fails with message:
CAS2286E LDAP request failed. RC: 10 User DN: CN=xxxxxxx,OU=yyyyy,DC=zzzz,DC=oo URL: LDAP://###.###.##.###:nnnn LDA...              

                            

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

For example in the following LDAP.cpu record:

SET CONTROL(LDS)
LIST LDAP.CPU

xxx  /  LDAP.CPU LAST CHANGED BY abcd ON mm/dd/yy-nn:nn
               ACTIVE ADMINDN(acf2lid=xxxx) APPLNAME()
               BITDEFLT(CHARACTER/YN) NOBROADCST NOCHANGE DATEFMT(MMDDYYYY)
               DELETE INSERT LDSLABEL NEXTKEY(nextkey) OBJCLASS(acf2lid) PSWDASIS
               URL(ldap://###.###.###.###:nnn)
               USERDNS(acf2lid=%1, host=xxx, o=yyy c=oo) XREF(NAME/Name PASSWORD/userPassword PHONE/Phone)

The NAME, PASSWORD and PHONE are valid ACF2 logonid fields.

The Name, userPassword and Phone are the LDAP attribute of the entry on the LDAP directory that corresponds to the logonid field name on the logonid record.