configtool ADDFULLADMIN cannot add a user value
3 years ago
Originally Published: 2004-01-15
Article Number
000061726
Applies To
RSA Mobile 1.5 Authentication Server
Microsoft Windows 2000 Server SP3
Issue
configtool ADDFULLADMIN cannot add a user value
Error: "Error executing: ADDFULLADMIN. Reason: cannot locate Admin1 in directory."
Cause
The BINDING_ATTR value is inappropriate for the way users are being created inside the Directory Server. Dependant on the software being used to generate the entries, the BINDING_ADDR may need to be modified.
Resolution
In the above example there might be two differing solutions:

1. The BINDING_ATTR should be set to a value of 'cn' during the initial installation to match the way the users are usually created inside the directory server

2. The user was created with a non-standard tool, and if deleted and created the way the usual way user records are created, they can end up as shown below:

   uid=Admin1,ou=People,dc=acme,dc=com

IMPORTANT NOTE: Verify the configuration used in the configuredatastore.cmd/sh matches your LDAP
Workaround
configuredatastore.cmd contained the following entry: set BINDING_ATTR=uid
The Directory Server user is configured as follows: cn=Admin1,ou=People,dc=acme,dc=com