The uvms authentication does not work if the LDAP server does not support the PagedResultsControl extension

book

Article ID: 86332

calendar_today

Updated On:

Products

CA Automic Dollar Universe

Issue/Introduction

Error Message :
The messages that will appear on the uvserver.log when the TRACE mode is enabled will show that the user can not be found and that the authentication fails.

Patch level detected:Univiewer Management Server 6.4.21
Product Version: Dollar.Universe 6.4.21

Description :In case of upgrade of an UVMS inferior to 6.2.41 to 6.4.21 or superior, the LDAP authentication fails.
When launching the command unicheckldap it says that that authentication failed as the user is not found.

Cause

Cause type:
Defect
Root Cause: The issue was due to the fact that the LDAP server does not support the PagedResultsControl extension.ldapsearch -x -H ldap://annuaire.preprod.inetpsa.com:389 -D 'cn=MZPGIP01,ou=programs,o=psa' -b 'ou=users,o=psa' -w 'password' "objectclass=person" -E \!pr=5/prompt with scope subtree # search result

Environment

OS: All
Related configuration item(s): The UVMS must be configured on LDAP authentication mode.

Resolution

We will use PagedResultsControl with non critical option to know if option is supported by ldap server before using it, so we can also integrate with LDAP servers not supporting the PagedResultsControl.

Fix Status: Released

Fix Version(s):
Component: Univiewer.Management.Server
Version: Dollar.Universe 6.5.21

Additional Information

Workaround :
N/A