Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

How to configure multiple users and group bases?

...

The table below lists LDAP errors you may encounter when configuring your tenant with the LDAP Security Manager. Verify the recommended values to resolve.

ParametersValue to VerifyError on Edit Tenant page
Connection URLWrong URL

Group access failure: AuthenticationException?: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1]

Verify the values in Connection URL,Connection User and Connection Password fields

Connection UserWrong username

Group access failure: AuthenticationException?: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece]

Verify the values in Connection URL,Connection User and Connection Password fields

Connection PasswordWrong password

Group access failure: AuthenticationException?: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 52e, vece]

Verify the values in Connection URL,Connection User and Connection Password fields

Users BaseWrong CN"User access failure: NameNotFoundException?: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of: 'DC=frevvo,DC=com' ]
Users BaseWrong DCUser access failure: UnknownHostException?: frevvod.com
Groups BaseWrong CNGroup access failure: NameNotFoundException?: [LDAP: error code 32 - 0000208D: NameErr: DSID-031001CD, problem 2001 (NO_OBJECT), data 0, best match of: 'DC=frevvo,DC=com' ]
Groups BaseWrong DCGroup access failure: UnknownHostException?: fqrevvo.com
All Groups FilterSyntax error like mismatched bracketsGroup access failure: InvalidSearchFilterException?: Unbalanced parenthesis
All Groups FilterInvalid search e.g. (objectClasses=group) instead of (objectClass=group)Group access failure: InvalidSearchFilterException?: [LDAP: error code 18 - 0000216B: AtrErr: DSID-03140274, #1: 0: 0000216B: DSID-03140274, problem 1004 (WRONG_MATCH_OPER), data 0, Att 180006 (objectClasses) ]
All Groups FilterWrong value e.g. (objectClass=groups) instead of (objectClass=group)Tenant updates successfully
All Users FilterSame as all groups filterSame as all groups filter
Certifcate ErrorVerify that the certificate is signed by a valid Certificate Authority. Self-signed certificates are not recommended and will not work for LDAP(s) in the Cloud.Group Access failure:SunCertPathBuilderException:Unable to find valid certification path to requested target