The uvms authentication does not work if the LDAP server does not support the PagedResultsControl extension

Products

• CA Automic Dollar Universe

Issue/Introduction

In case of upgrade of an UVMS inferior to 6.2.41 to 6.4.21 or superior, the LDAP authentication fails.
When launching the command unicheckldap it says that that authentication failed as the user is not found.

The messages that will appear on the uvserver.log when the TRACE mode is enabled will show that the user can not be found and that the authentication fails.

Environment

The UVMS must be configured on LDAP authentication mode and the target LDAP server does not support PagedResultsControl 

Cause

Cause type:Defect
Root Cause: The issue was due to the fact that the LDAP server does not support the PagedResultsControl extension.

ldapsearch -x -H ldap://ldap_server:389 -D 'cn=username,ou=users,o=company' -b 'ou=users,o=company' -w 'password' "objectclass=person"

-E \!pr=5/prompt with scope subtree # search result

Resolution

Update to a fix version listed below or a newer version if available.

Fix Status: Released

Fix Version(s):
Component: Univiewer.Management.Server
Version: Dollar.Universe 6.5.21

Additional Information

From now on, UVMS will use PagedResultsControl with non critical option to know if option is supported by LDAP server before using it, so we can also integrate with LDAP servers not supporting the PagedResultsControl.