AHD04400 Parse Error when running SDM LDAP Merge
Article ID: 196720
Updated On:
Products
Issue/Introduction
When attempting to do an LDAP Merge, receive an AHD04400 parsing error.
STDLOG has errors similar to the following:
web:local 4496 ERROR session.c 5457 Parameter PERSID's value =(ldap:uid=XXX,ou=XXX,ou=XXX,o=XXX,was failed against the pattern (AlphaNumericUnderScoreColonSpaceEqualCommaPercent)
web:local 4496 ERROR session.c 5458 Hence this web request will be rejected
web:local 4496 ERROR session.c 4030 Error parsing cgi POST string "&ENV_DOCUMENT_ROOT=C:\Program Files (x86)\CA\Service Desk Manager\bopcfg\www\CATALINA_BASE\webapps\CAisd\&ENV_HTTP_USER_AGENT=Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)&ENV_HTTP_REMOTE_USER=null&ENV_REMOTE_HOST=XXX&ENV_REMOTE_USER=null&ENV_REQUEST_METHOD=GET&ENV_HTTP_COOKIE=SESS00863ef60791d53d16827e67b7f05772=L64uCKCmj8Uu3zvxksXFtre8uFtpjM3-XQqFNlgli6Q;&ENV_SCRIPT_NAME=/CAisd/pdmweb.exe&SID=1653637656&FID=6372&OP=SHOW_DETAIL&FACTORY=ldap&PERSID=XXX&KEEP.POPUP_NAME=USD1596641993125&KEEP.use_role=1"
Environment
Service Desk Manager 17.x
All Supported Operating Systems
Resolution
1. Make the following changes to the NX_ROOT\bopcfg\www\web.cfg file:
Change
SecureParameter.PERSID AlphaNumericUnderScoreColonSpaceEqualCommaPercent
To
SecureParameter.PERSID AlphaNumericHiphenUnderScoreParenthesesColonSpaceEqualCommaPercentDot
Change
SecureParameter.KEEP.PERSID AlphaNumericUnderScoreColonSpaceEqualCommaPercent
To
SecureParameter.KEEP.PERSID AlphaNumericHiphenUnderScoreParenthesesColonSpaceEqualCommaPercentDot
2. If not already present, add the following under the "## Pattern for Windows" section
Windows_SecureValidator.AlphaNumericHiphenUnderScoreParenthesesColonSpaceEqualCommaPercentDot ^[A-Za-z0-9-_(): =,\\%.]*$
3. Repeat the above changes for the NX_ROOT\bopcfg\www\web.cfg.last and NX_ROOT\bopcfg\www\web.cfg.tpl files
4. Recycle SDM service for the change to take effect
Feedback
