Specifying an Active Directory group in the Account Discovery section and launching discovery for an application configured as Windows Domain Service, I am getting "Missing distinguished name" why ?

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

I have configured an application as a Windows Domain Service (WDS) and I have specified  a group in its Account Discovery/Groups section.

Afterwards I have tried to perform an account discovery, but I am always getting "Missing distinguished name" no matter what group and syntax I specify there. 

The account I am using for discovery works for LDAP to Access Manager integration.

What happens and how can I solve it ?

<Please see attached file for image>

Environment

Release: PAMDKT99500-2.7-Privileged Access Manager-NSX API PROXY
Component:

Resolution

Whenever defining the account that will be used to perform discovery in the Password Management section of the product, it is necessary to specify in the Distinguished Name (DN) the DN for the account in active directory 

 

<Please see attached file for image>

src="/servlet/servlet.FileDownload?file=0150c000004AKgQAAW" alt="Application.jpg" width="889" height="660">