ACS can not access ADS-LDAP starting from "DC=..."

Hi
I have an ACS v4.2 from which I try to access an ADS LDAP directory. When I use "CN=Users,DC=Domain,DC=com" as the baseDN for the users and the groups everything works as it should. When I change the base DN to "DC=Domain,DC=com" only, then the ACS is not able to find any users or groups. Even when trying to configure the group mappings he claims: "LDAP Server NOT reachable. Please check the configuration.". Using an LDAP browser I don't have any issues accessing the directory from the shorter baseDN.
Is this a v4.2 related problem or a general ACS problem?
The point is that I need to find users in different OU's, which are based directly under the domain name, so that I need to search for them starting from "DC=Domain,DC=com". I know that with "Generic LDAP" I can make severeal "Databsae Configurations" to resolve the issue with the OU's. But not with a "RSA SecurID Token and LDAP Group Mapping" setup. There is only possible to have one LDAP group mapping configuration.
Any input would be greatly appreciated.

Hi
We invested a lot of time together with TAC and development. Short answer: No it's not solved. It was an ACS bug. But development didn't realy understand the problem. We went ahead and restructured the ADS.
The problem we had, is that a LDAP directory of a Windows is not fully accessible. Even if you connect as a Domain Administrator or to the Global Catalog. :-) And that's where the ACS fails. LDAP browsers just read over the unaccessible parts of a LDAP directory and show you all the accessible part. ACS doesn't. He stops and reports the failure. You can see that clearly when sniffing the access of the ACS and the LDAP browser to the directory. Unfortunately the unaccessible part is at the beginning of the ADS LDAP directory. :-(
Maybe they resolved the problem nowadays. Or if you have a Windows Guru who can help you in making the directory fully accessible I would be interessted in the How-To.
I wish you best luck with your issue.
Kind regards
Roberto

Similar Messages

I can not access to the isqlplus from the client

Version: Oracle 10.1.0.2.0
I have installed Oracle 10.1.0.2.0 on SuSE Linux Enterprise Server 8.
I can access to my dbconsole from PC without any issue.
I can also access to the isqlus environment from the server without any issue.
But I can not access to the isqlplus from client or PC.
I can go the first web page of isqlplus by using isqlplus url by clicking on isqlplus icon under home page of dbconsole.
But I enetered username and password.Its bring error page.
Note: isqlplus start up on the server.
Any help wil be appricated.
D

The page cannot be displayed\
The page you are looking for is currently unavailable.
The Web site might be experiencing technical difficulties,
or you may need to adjust your browser settings.
Please try the following:
Refresh button, or try again later.
If you typed the page address in the Address bar, make sure that it is spelled correctly.
To check your connection settings, click the Tools- menu, and then click Internet Options .
On the Connections\ tab, click \ Settings\b0 .
The settings should match those provided by your local area network (LAN) administrator or
Internet service provider (ISP).
If your Network Administrator has enabled it,
Microsoft Windows can examine your network and automatically discover network connection settings.
\line If you would like Windows to try and discover them,
Detect Network Settings <javascript:doNetDetect
Some sites require 128-bit connection security. Click the \b Help\b0 menu and then click
\b About Internet Explorer \b0 to determine what strength security you have installed.
If you are trying to reach a secure site,
make sure your Security settings can support it.
Click the \b Tools\b0 menu, and then click \b Internet Options\b0 .
On the Advanced tab, scroll to the Security section and check settings
for SSL 2.0, SSL 3.0, TLS 1.0, PCT 1.0.
back button to try another link. \
Cannot find server or DNS Error\line Internet Explorer \

HT1338 Why I can not access to yahoo games from my Mackbook Air?

Why I can not access to yahoo games from my Mackbook Air?. I am using Mac OS X 10.7. 4.

http://jdk7.java.net/download.html
u10 fixes yahoo game problem.

TS2972 I can not access a purchased album from itunes on another shared home computer it will not let me put the album into my library

I can not access a purchased album from itunes on anoter shared home computer
It will not let me put the album into my library
Has anyone any ideas

Your phone connected, iTunes running: File>Transfer Purchases.

I can not access icloud or twitter from my iPhone. They appear grey and i can't click on it. When i updated my phone it didn't give me an option to switch on icloud. what should i do?

I can not access my icloud and twitter from my iphone 4. It does not give me an option to change icloud settings. After i updated my iOS, it did not give me an option to switch on icloud. Can anyone please help with this?

Hey guys I figured out how to solve the issue.
You need to go to settings>general>restrictions.
Turn off restrictions and your iCloud and twitter will start working.
Enjoy.

Can not access walden e-mail from laptop

Can not access Walden University e-mail. Does anyone else have this problem?

It appears to me they don't support Macs:
http://tutorials.waldenu.edu/students_23807.htm

Can not access my gmail account from Thunderbird mail client - account marked with padlock

I am moving from an telia.com to a gmail.com mail account using a thunderbird mail client. Has been working fine until last evening. When my client could not access gmail anymore. The problem is displayed with a padlock o n the mail account.

Yes OK padlock has been there before problem occurred - still I have the problem Thunderbird just keeps on working and is not able to access gmail server and I do not see any error indication

Can not access msn e-mail from mozilla firefox. Why not??

Blank page appears when I sing into hotmail at msn.

Clear cache and cookies and reload the page.

Can not access app store

i can not access app store icon from my mac book pro
last time it is no problem

Thanks brother
The icon not disappear, but can not open, just shaking icon

Can not access Icloud today.

I can not access my Icloud today from my PC. Itunes has my Icloud songs grayed out. I tried logging out but Itunes freezes up when I try. Any suggestions?

That has happened to me a few times over the past weekend...just do something else and try again. Seems like they are doing some house cleaning in the cloud.

Can not access certain URL

I can not access my company URL from BB while i can access it from any other device. The below message received,
The requiered URL could not be retrieved
Sorry, we couldn't find the web page that you requested. Make sure that you typed the web address correctly, and try again.
Error Code: 10006

Hi,
It seems like with every BB Bold it is giving error code 10006. With the curve it is giving 504 gateway timeout. Only th default browser. if you install any other browser on the phone then it can display the site. When I phone my service provider they say my phone software is not working and I ned to bring it in...this is not true for I tested it on about 10 blackberry bolds and none of them display the site. also not the curve or torch.(Torch is also giving the 10006 error code). When I phone my hosting company they say they cant see anything wrong with the setup of the website. So is blackberry blocking the site or what? I dont know what to do anymore. and the client wants this to display on a blackberry.
I see you are from France. Could it be that maybe it does not work in South Africa only? Something on the sa BIS?

I am unable to re-install itunes. The installer starts ok and then indicates that it can not access a network !!

I am unable to re-install itunes. The installer starts ok and then indicates that it can not access a network !! I have tried to uninstall but get the sme error message. I have used 3rd party software to uninstal but still have no joy. My pc is running Vista.
Can you anyone offer a working solution ?

Many thanks.
Let's try the fixit from the following Microsoft document with that one:
Fix problems with programs that can't be installed or uninstalled

I can not access the app from itunes

Hi, can someone help me solve this problem?
I have an iPhone 4 with iOS 7.0.3 with iTunes 11.1.2 and when I want my iPhone to sync from iTunes can not access the iTunes app tab I close iTunes without possibility of doing something.
this only happens to me with the iPhone, I have also an iPad 2 and it works ok.

Hi tankard77,
Thanks for visiting Apple Support Communities.
If iTunes is quitting unexpectedly when you try to sync your iPhone, start with the troubleshooting information in this article:
iTunes for Windows Vista or Windows 7: Troubleshooting unexpected quits, freezes, or launch issues
http://support.apple.com/kb/ts1717
Best Regards,
Jeremy

When I plug in my Ipod touch to my computer a warning appears "The program cant start because MSVCR80.dll is missing." I can not access my Itunes library. Also, an "error 7 Windows error 126" appears as well. Any ideas?

When I plug in my Ipod Touch to my computer I can not access my Itunes library. The following message appears "The program cant start because MSVCR80.dll is missing." Also, another message appears as well - "Error 7 Windows error 126" as well as APSDaemon.exe.
I have NO IDEA what the heck to do.
Any ideas?
Thanks!

Issues installing iTunes or QuickTime for Windows
solving MSVCR80
iTunes 11.1.4 for Windows: Unable to install or open
Troubleshooting issues with iTunes for Windows updates

TS4002 I bought iPad and I can not access, A message appears asking me account and password when i return to the person who I purchased it from him, he told me that he forgot the account and password I want a solution to the problem, because in this way I

I bought iPad and I can not access, A message appears asking me account and password when i return to the person who I purchased it from him, he told me that he forgot the account and password
I want a solution to the problem, because in this way I will not benefit from the iPad

There is no solution. You have to provide the ID and password. There is no way around it. If the person you bought it from can't provide it, return it and get your money back.

ACS can not access ADS-LDAP starting from "DC=..."

Similar Messages

Maybe you are looking for