LDAP Access denied : Unknown user after upgrade from DUAS v6.0
search cancel

LDAP Access denied : Unknown user after upgrade from DUAS v6.0

book

Article ID: 227667

calendar_today

Updated On:

Products

CA Automic Dollar Universe

Issue/Introduction

We installed the new UVMS 6.10.x and integrated with LDAP.

When we try to login with an LDAP user, we get the following error:

"The server cannot be reached: LDAP Access denied: Unknown user  uvms_host.domain.com:4184"

Environment

Release : 6.x (lower versions)

Component : UVMS

Cause

Due to code changes in UVMS the ldap.xml has to be adjusted when upgrading from lower versions of UVMS v6.x

Resolution

Replace the configuration under the tag <userAttributeId> with value CN to value sAMAccountName, like follows:

Instead of 

      <usersAttributeId>CN</usersAttributeId>
      <usersListSearchFilter><![CDATA[]]></usersListSearchFilter>
      <usersSearchFilter>sAMAccountName=!login!</usersSearchFilter>
    <usersSearchDepth>SUBTREE_SCOPE</usersSearchDepth>

use

      <usersAttributeId>sAMAccountName</usersAttributeId>
      <usersListSearchFilter><![CDATA[(&(objectClass=person)(sAMAccountName=*))]]></usersListSearchFilter>
      <usersSearchFilter><![CDATA[(&(objectClass=person)(sAMAccountName=!login!))]]></usersSearchFilter>

or

      <usersSearchBase>DC=domain,DC=com</usersSearchBase>
      <usersAttributeId>sAMAccountName</usersAttributeId>
      <usersListSearchFilter><![CDATA[]]></usersListSearchFilter>
    <usersSearchFilter>sAMAccountName=!login!</usersSearchFilter>
      <usersSearchDepth>SUBTREE_SCOPE</usersSearchDepth>