VIP Enterprise Gateway Console Authentication or My VIP\VIP Manger IdP portal login fails with LDAP error code 49, Data 52f

Products

• VIP Service

Issue/Introduction

LDAP authentication to the VIP Enterprise Gateway console, VIP Manager IdP, or the SSP\MyVIP IdP fails. The DEBUG level logs captures the following response from LDAP:

LDAP: error code 49 - 80090308: LdapErr: DSID-xxxxxxxx, comment: AcceptSecurityContext error, data 52f, v4f7c^@

Environment

The user object is a member of a Protected Users Security Group

Cause

LDAP is rejecting the authentication attempt. 

Resolution

Remove the user from the Protected User Security Group. Or, create a new user that is a member of the LDAP filter criteria and is not a member of the Protected User Security Group.

If Protected User Security Group membership is a requirement, enable LDAP logging to determine why LDAP is rejecting the request and adjust accordingly. 

Additional Information

More about Protected Users Security Group: https://learn.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/protected-users-security-group