cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2651
Views
0
Helpful
2
Replies

Unity Connection LDAP Authentication

s.casper_2
Level 1
Level 1

I have LDAP synchronization working between Connection 7.1.2a and AD 2008.

> I can synch and import users. I am now trying to set up the authentication

> piece and am getting the following error when I try to save my LDAP

> Authentication configuration:

>

> Error while Connecting to ldap://recasp.test.mtb.com:389/Test\TVCCUPS,

> javax.naming.InvalidNameException: Test\TVCCUPS: [LDAP: error code 34 -

> 0000208F: LdapErr: DSID-0C09070B, comment: Error processing name, data 0,

> v1771]; remaining name \'Test\TVCCUPS\'

>

> I am using the same LDAP Manager Distinguished Name, passwords, target

> Domain Controller servers and LDAP port that I used to set up the LDAP

> Directory configuration. This ID is set to read all user accounts. Do I need

> an account with more permissions or should this work?

>

1 Accepted Solution

Accepted Solutions

Brad Magnani
Cisco Employee
Cisco Employee

Steven,

This is because you most likely aren't using the proper syntax for Distinguished Name. It needs to be in the format below (insert your company's structure):

CN=ucadmin,OU=Cisco,OU=Service Accounts,DC=mandt,DC=bank,DC=com

The LDAP Directory configuration page will work with your current syntax, but the authentication will not. I would advise changing them both to the above syntax. If you're not sure what your syntax involves; ADSIEdit tool from a Windows machine can give you the proper string that you can just paste in there.

Hope that helps,

Brad

View solution in original post

2 Replies 2

Brad Magnani
Cisco Employee
Cisco Employee

Steven,

This is because you most likely aren't using the proper syntax for Distinguished Name. It needs to be in the format below (insert your company's structure):

CN=ucadmin,OU=Cisco,OU=Service Accounts,DC=mandt,DC=bank,DC=com

The LDAP Directory configuration page will work with your current syntax, but the authentication will not. I would advise changing them both to the above syntax. If you're not sure what your syntax involves; ADSIEdit tool from a Windows machine can give you the proper string that you can just paste in there.

Hope that helps,

Brad

That worked! Thanks for your help