Dell Unity: Failed to add role mapping for LDAP user when forest level authentication is configured. (User Correctable)

Resumen: Customer configured forest level LDAP authentication on Unity for GUI management. The LDAP connection was verified OK but customer was unable to add role mapping for LDAP users.

Este artículo se aplica a Este artículo no se aplica a Este artículo no está vinculado a ningún producto específico. No se identifican todas las versiones del producto en este artículo.

Síntomas

- Customer configured forest level LDAP authentication on LDAP server port 3268 for Unisphere management. Customer followed the Security Configuration Guide to specify userPrincipalName in the User ID Attribute field in Advanced window. 

Dell EMC Unity™ Family Security Configuration Guide (delltechnologies.com)

Security Configuration Guide
When trying to add LDAP user in Users and Groups --> User Management --> Manage Users & Groups, the following errors were received. 

add LDAP user in Users and Groups
 
 

Causa

- When forest level LDAP authentication is configured, the username of the LDAP user for role mapping should be configured in the format of <username>@<domain> which is exactly the userPincipalName that customer configures for the user in LDAP server. 

Resolución

- If Windows Domain Controller is the LDAP server, the userPrincipalName can be retried from user's properties via Active Directory Users and Computers. Please note the Advanced Features in View tab needs to be enabled to show the Attribute Editor of user.  

Active Directory Users and Computers
 

Productos afectados

Dell EMC Unity
Propiedades del artículo
Número del artículo: 000203550
Tipo de artículo: Solution
Última modificación: 14 mar 2023
Versión:  3
Encuentre respuestas a sus preguntas de otros usuarios de Dell
Servicios de soporte
Compruebe si el dispositivo está cubierto por los servicios de soporte.