LDAPSync on non-AD throws Invalid user name. Allowed characters are...
search cancel

LDAPSync on non-AD throws Invalid user name. Allowed characters are...

book

Article ID: 411968

calendar_today

Updated On:

Products

CA Automic Workload Automation - Automation Engine CA Automic One Automation

Issue/Introduction

When running the LDAP Sync tool against a non-Active Directory directory service, the LDAPSync process does not add any new users and throws an error like:

ERROR  Could not add new user. Invalid Object/Alias name: 'Invalid user name. Allowed characters are: ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.$_@#/-. User names must contain exactly one / character!'.

Environment

Directory service: Non-AD directory service
LDAP Sync version: Any

Resolution

When using a non-AD directory service, be sure that directoryType is set to "other" in the connection element within ldapsync.xml.  Example:

<Connection serverName="MyCompany.example.com" directoryType="other" url="mycompany.example.com:389" useSSL="true" connectionTimeout="0" readTimeout="120" searchTimeout="60" username="domain\username" password="*****" retryConnect="10"/>

This is discussed in the Configuring LDAP Sync documentation page.