NetWorker: NMC Login Fails LDAP Returns DNs Instead of Usernames

Users are unable to log in to the NetWorker Management Console (NMC) using Active Directory credentials.

Running the LDAP user query returns valid Distinguished Names (DNs) but does not display usernames.

 Example 1:

authc_mgmt -u administrator -e query-ldap-users -D "query-tenant=default" -D "query-domain=mydomain.local"

Output:
User Name    Full Dn Name
             CN=First Last,OU=Users,OU=Software Support,OU=IT,dc=mydomain,dc=local
             CN=Second Third Admin,OU=Users,OU=Software Support,OU=IT,dc=mydomain,dc=local

Example 2:

authc_mgmt -u administrator -e query-ldap-groups-for-user -D query-tenant=default -D query-domain=mydomain.local -D user-name=MYUSER

ERROR main com.emc.brs.auth.cli.core.AuthMgmtCmdExecutor - Error while performing Operation:
com.emc.brs.auth.common.exception.BRHttpErrorException: 404 . Server message: A user with the name MYUSER does not exist in authority mydomain.local
  at com.emc.brs.auth.client.template.impl.DefaultBRResponseErrorHandler.handleError(DefaultBRResponseErrorHandler.java:66) ~[auth-cli-with-dependencies.jar:?]

The LDAP **User ID Attribute** is incorrectly configured due to a typographical error.

•   Incorrect Value: sAMAcoountName
•  Correct Value: sAMAccountName

Because the attribute name is misspelled, the authentication service cannot retrieve the users' login names, resulting in failed NMC authentication.

Update the LDAP User ID Attribute with the correct Active Directory attribute name.

Run the following command on the NetWorker server or the Authentication Server:

authc_config -u administrator -e update-config -D config-id=<config-id> -D "config-user-dn-password=*******" -D "config-user-id-attr=sAMAccountName"

Verification

After updating the configuration:

1. Run the LDAP query again.     
   

   authc_mgmt -u administrator -e query-ldap-users -D "query-tenant=default" -D "query-domain=mydomain.local"

2. Verify that the *User Name* column is populated with valid AD usernames.
3. Test NMC login using an Active Directory account.

• NetWorker: AD and LDAP Integration and Configuration (Troubleshooting Guide)
• NetWorker: How To Set up AD/LDAP Authentication
• NetWorker: How To Set up LDAP/AD using authc_config scripts