Dell Unity: Failed to Add Role Mapping for LDAP User When Forest Level Authentication Is Configured
Summary: Customer configured forest level LDAP authentication on Unity for UI management. The LDAP connection was verified OK, but customer was unable to add role mapping for LDAP users. (User Correctable) ...
Symptoms
Customer configured forest level LDAP authentication on LDAP server port 3268 for Unisphere management. Customer followed the Security Configuration Guide to specify userPrincipalName in the User ID Attribute field in the Advanced window.
Dell EMC Unity Family Security Configuration Guide (delltechnologies.com)
When trying to add LDAP user in Users and Groups --> User Management --> Manage Users & Groups, the following errors were received.
Cause
When forest level LDAP authentication is configured, the username of the LDAP user for role mapping should be configured in the format of <username>@<domain> which is exactly the userPincipalName that customer configures for the user in the LDAP server.
Resolution
If the Windows domain controller is the LDAP server, the userPrincipalName can be retried from user's properties using Active Directory Users and Computers.
