Authentication Manager 8.x with ADAM Active Directory Application Mode
3 years ago
Originally Published: 2014-06-06
Article Number
000051609
Applies To
RSA Authentication Manager 8.0

Issue
Getting Authentication Manager 8.0 8.1 working with ADAM  Active Directory Application Mode

Authentication Manager indicates that an account is not enabled

Cause
AM8.0 normally will not work with ADAM, as stated in the documentation. The reason is AM8.x tries to get information about the users status from the Active Directory userAccountControl attribute , which is a numerical value. There are a large number of possible values for this, as the number can be translated to binary, where each bit is a flag. The two bits checked by Authentication Manager are:

Flag            hex value  decimal value
ACCOUNTDISABLE  0x0002        2  
NORMAL_ACCOUNT  0x0200      512

(more details in Primus   Which Microsoft Active Directory attribute propertyflag is checked forLDAP Disable/Enabled State?   )

However, ADAM does not use this attribute. As per the Microsoft Article:
http://msdn.microsoft.com/en-us/library/aa772124%28v=vs.85%29.aspx       
"AD LDS does not support the userAccountControl attribute."  

Resolution
If use with ADAM is required , RSA has an extra-cost product called  RSA Adaptive Directory , which can sit between AM8.x and ADAM.  AM8.x is supported with RSA Adaptive Directory.
Notes
AD LDS Active Directory Lightweight Directory Services is a newer name for ADAM Active Directory Application Mode

Related Articles

Trending Articles

Don't see what you're looking for?