Loading...

My Account

Log In

Knowledge Center

Get support for FireEye products

Failed: (E-SU) - CN=Backup oper,CN=Users,DC=sr,DC=nws,DC=xxxx,DC=gov - null

Technical Articles ID: KB77576
Last Modified: 2023-04-13 10:58:31 Etc/GMT

Environment

Drive Encryption (DE) 7.1
Endpoint Encryption for PC (EEPC) PC 7.0.x, 6.2.x

For details of DE 7.1.x supported environments, see KB79422 - Supported platforms for Drive Encryption 7.x.

Problem

When running the Server DE or EE LDAP Server User or Group Synchronization, users are successfully added, but the task log records the following error:

Failed: (E-SU) - CN=Backup oper,CN=Users,DC=sr,DC=nws,DC=xxxx,DC=gov - null

The Orion.log records the following error:

WARN [http-8443-Processor20] dialogs.Ldap - javax.naming.NameNotFoundException: [LDAP: error code 32 - 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:

Cause

The User Certificate attribute value (usercertificate) in the LDAP Sync server task has been incorrectly set to UserPrincipalName.

Solution

When you configure the DE or EE LDAP Server User or Group Synchronization task, use the following attributes:

The User Certificate attribute value should be either UserCertificate or left blank.
The User Name and Display Name fields must be populated with an LDAP attribute (for example: SamAccountName, UserPrincipalName, CN) that can identify the account.

Example

User Name	SamAccountName
Display Name	SamAccountName
User Certificate	usercertificate

Affected Products

Languages:

This article is available in the following languages: