Dell Unity: Failed to add role mapping for LDAP user when forest level authentication is configured. (User Correctable)
Summary: Customer configured forest level LDAP authentication on Unity for GUI management. The LDAP connection was verified OK but customer was unable to add role mapping for LDAP users.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
- Customer configured forest level LDAP authentication on LDAP server port 3268 for Unisphere management. Customer followed the Security Configuration Guide to specify userPrincipalName in the User ID Attribute field in Advanced window.
Dell EMC Unity™ Family Security Configuration Guide (delltechnologies.com)
When trying to add LDAP user in Users and Groups --> User Management --> Manage Users & Groups, the following errors were received.
Dell EMC Unity™ Family Security Configuration Guide (delltechnologies.com)
When trying to add LDAP user in Users and Groups --> User Management --> Manage Users & Groups, the following errors were received.
Cause
- When forest level LDAP authentication is configured, the username of the LDAP user for role mapping should be configured in the format of <username>@<domain> which is exactly the userPincipalName that customer configures for the user in LDAP server.
Resolution
- If Windows Domain Controller is the LDAP server, the userPrincipalName can be retried from user's properties via Active Directory Users and Computers. Please note the Advanced Features in View tab needs to be enabled to show the Attribute Editor of user.
Affected Products
Dell EMC UnityArticle Properties
Article Number: 000203550
Article Type: Solution
Last Modified: 14 Mar 2023
Version: 3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.