Error: is out of the User Directory's search root scope in Policy Server

Products

• SITEMINDER

Issue/Introduction

Running Policy Server, when it tries to authenticate the user from an Active Directory User Directory, the Active Directory User Directory returns the error:

[11/04/2024][10:24:01.375][10:24:01][4248][5928][SmDsLdapProvider.cpp:1970][CSmDsLdapProvider::Search][][][][][][][][][][][][][][][][][][][Search request DN, 'uid=<id>', is out of the User Directory's search root scope (Directory Root DN: 'dc=example,dc=com')][][Ldap search DN is out of the Directory's base DN scope.]

 

Resolution

Modify the configuration of the LDAP User Directory by adding ( and ) characters:

  Start sAMAccountName=
  End
  Effective Lookup sAMAccountName=ID-From-Login

to

  Start (sAMAccountName=
  End )
  Effective Lookup (sAMAccountName=ID-From-Login)

to fix this issue.