Active Directory AFX test connector capability fails with 'Invalid DN Syntax' and 'Error processing name' errors in RSA Identity Governance & Lifecycle

Header

Title	Active Directory AFX test connector capability fails with 'Invalid DN Syntax' and 'Error processing name' errors in RSA Identity Governance & Lifecycle

URL Name	Active-Directory-AFX-test-connector-capability-fails-with-Invalid-DN-Syntax-and-Error-processing-name-errors-in-RSA-Identity-Governance-Lifecycle

Summary	Active Directory AFX test connector capability fails with 'Invalid DN Syntax' and 'Error processing name' errors in RSA Identity Governance & Lifecycle

Validation Status	Work in Progress

Age	2,849.96

Article Content

Translate To

Applies To

RSA Product Set: Identity Governance & Lifecycle
RSA Version/Condition: All

Issue

When testing the Active Directory AFX connector capability Add Account to AD Group in RSA Identity Governance & Lifecycle, the test fails with the following error in the user interface (AFX > Connectors > {connector-name} > Test Connector Capabilities).

LDAPException: Invalid DN Syntax (34) Invalid DN Syntax
LDAPException: Server Message: 00000057: LdapErr: DSID-0C090BD9, comment: Error processing name, data 0, v1db1
LDAPException: Matched DN:

Cause

The CN= prefix is missing from the Group attribute input parameter as shown below:

Resolution

To resolve this issue, add the CN= prefix to the beginning of the Group attribute input parameter that is being passed to the AFX connector as shown below:

Workaround

Notes

Legacy Article ID 000033519

Article Settings

Audience	External

Article Source	Manual

Original Article Author	Diane McCoy

Original Created Date	7/11/2016 5:43 PM

Owner	Diane McCoy

Article Assignment

Assigned To

Assigned By

Assignment Note

Assignment Due Date

Article Properties

Publication Status	Published

Article Type	Knowledge

Article Number	000064120

Created By	Diane McCoy

Last Modified By	Katrina Nash

Language	English