Unity Connection LDAP Authentication

Answered Question
Aug 31st, 2009
User Badges:

I have LDAP synchronization working between Connection 7.1.2a and AD 2008.

> I can synch and import users. I am now trying to set up the authentication

> piece and am getting the following error when I try to save my LDAP

> Authentication configuration:

>

> Error while Connecting to ldap://recasp.test.mtb.com:389/Test\TVCCUPS,

> javax.naming.InvalidNameException: Test\TVCCUPS: [LDAP: error code 34 -

> 0000208F: LdapErr: DSID-0C09070B, comment: Error processing name, data 0,

> v1771]; remaining name \'Test\TVCCUPS\'

>

> I am using the same LDAP Manager Distinguished Name, passwords, target

> Domain Controller servers and LDAP port that I used to set up the LDAP

> Directory configuration. This ID is set to read all user accounts. Do I need

> an account with more permissions or should this work?

>


Correct Answer by Bradford Magnani about 7 years 8 months ago

Steven,


This is because you most likely aren't using the proper syntax for Distinguished Name. It needs to be in the format below (insert your company's structure):


CN=ucadmin,OU=Cisco,OU=Service Accounts,DC=mandt,DC=bank,DC=com


The LDAP Directory configuration page will work with your current syntax, but the authentication will not. I would advise changing them both to the above syntax. If you're not sure what your syntax involves; ADSIEdit tool from a Windows machine can give you the proper string that you can just paste in there.


Hope that helps,

Brad

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
Bradford Magnani Mon, 08/31/2009 - 06:54
User Badges:
  • Cisco Employee,

Steven,


This is because you most likely aren't using the proper syntax for Distinguished Name. It needs to be in the format below (insert your company's structure):


CN=ucadmin,OU=Cisco,OU=Service Accounts,DC=mandt,DC=bank,DC=com


The LDAP Directory configuration page will work with your current syntax, but the authentication will not. I would advise changing them both to the above syntax. If you're not sure what your syntax involves; ADSIEdit tool from a Windows machine can give you the proper string that you can just paste in there.


Hope that helps,

Brad

Actions

This Discussion