The uvms authentication does not work if the LDAP server does not support the PagedResultsControl extension
book
Article ID: 86332
calendar_today
Updated On:
Products
CA Automic Dollar Universe
Issue/Introduction
Error Message : The messages that will appear on the uvserver.log when the TRACE mode is enabled will show that the user can not be found and that the authentication fails.
Patch level detected:Univiewer Management Server 6.4.21 Product Version: Dollar.Universe 6.4.21
Description :In case of upgrade of an UVMS inferior to 6.2.41 to 6.4.21 or superior, the LDAP authentication fails. When launching the command unicheckldap it says that that authentication failed as the user is not found.
Cause
Cause type: Defect Root Cause: The issue was due to the fact that the LDAP server does not support the PagedResultsControl extension.ldapsearch -x -H ldap://annuaire.preprod.inetpsa.com:389 -D 'cn=MZPGIP01,ou=programs,o=psa' -b 'ou=users,o=psa' -w 'password' "objectclass=person" -E \!pr=5/prompt with scope subtree # search result
Environment
OS: All Related configuration item(s): The UVMS must be configured on LDAP authentication mode.
Resolution
We will use PagedResultsControl with non critical option to know if option is supported by ldap server before using it, so we can also integrate with LDAP servers not supporting the PagedResultsControl.