Voltar
-
Título
Error performing LDAP operation while configuring MCU for Active directory -
Descrição
Attempting to connect MCU to Active directory and configure Active Directory the following errors are displayed:
Active Directory verification failed because Error performing LDAP operation.
Unable to configure AD
-
Causa
The Authentication Services QAC Container had entries that are not part of the standard QAC installation.The MCU expects to have certain amount of entries in a certain order. If this is altered in any way, the MCU AD configuration will fail.The origin of the additional entries may be the product of 3rd party software.The only entries that should exist in <domain>\Program Data\Quest Software\Authentication Services\{786E0064-A470-46B9-83FB-C7539C9FA27C}\Schema are:GecosGroupGidNumberGroupNameHomeDirectoryLoginNameLoginShellUidNumberUserEmailAddressUserGidNumberUserMobileNumber -
Resolução
One Identity Management Console for Unix is a web-based console that delivers a consolidated view and centralized point of management for local Unix users and groupsThe QAC Schema consists in an ADUC container with the following path<domain>\Program Data\Quest Software\Authentication Services\{786E0064-A470-46B9-83FB-C7539C9FA27C}\SchemaInside this path, there are the following subcontainersGecosGroupGidNumberGroupNameHomeDirectoryLoginNameLoginShellUidNumberUserEmailAddressUserGidNumberUserMobileNumberIf you have additional containers on this list, they will prevent MCU to operate properly and they must be deleted. -
Informações adicionais
Related KB articles https://support.oneidentity.com/safeguard-authentication-services/kb/310612/logging-on-to-mcu-with-an-ad-user-has-stopped-working-since-upgrading-control-center-to-version-4-2-1-configuring-ad-in-mcu-fails-when-using-control https://support.oneidentity.com/safeguard-authentication-services/kb/195581/in-mcu-failure-to-connect-to-ad-and-displayed-error-active-directory-verification-failed-because-error-performing-ldap-operation-unable-to-configure