Groups > IBM > IBM Tivoli Directory Integrator > Re: LDAP $dn syntax




LDAP $dn syntax

LDAP $dn syntax
Tue, 04 Dec 2007 11:40:52 +010
Hi,

I got a problem inserting contacts into the active directory LDAP.
Im using the default LDAP connector, I suspect this is not a TDI problem 
but a LDAP syntax problem.

The customer uses the following format in the AD LDAP.
CN=lastname\, Firstname,OU=TDI,DC=subdc,DC=pridc,DC=com

when adding this syntax to the $dn and
verified that cn is lastname\, Firstname.

objectClass is in TDI syntax 
["top","person","organizationalPerson","conta
ct"]

The error message I am getting is this:

javax.naming.InvalidNameException: CN=John\, 
Doe,OU=TDI,DC=subdc,DC=pridc,DC=com: [LDAP: error code 34 - 00002081: 
NameErr: DSID-03050AE0, problem 2003 (BAD_ATT_SYNTAX), data 0

I suspect it has to do with the CN syntax, but the customer is using 
this syntax in their AD tree.

Hope some of you can help me with this.

Thanks in advance
Post Reply
Re: LDAP $dn syntax
Wed, 05 Dec 2007 23:01:01 +010
Max,

in your CN mapping, do you specify the backslash? Try NOT to.

i.e

cn: Doe, John
$dn: cn=Doe\, John, OU=TDI,DC=subdc,DC=pridc,DC=com

Please let us know if this helps.

Cheers,

Christian

Max Bakken wrote:
> Hi,
> 
> I got a problem inserting contacts into the active directory LDAP.
> Im using the default LDAP connector, I suspect this is not a TDI problem 
> but a LDAP syntax problem.
> 
> The customer uses the following format in the AD LDAP.
> CN=lastname\, Firstname,OU=TDI,DC=subdc,DC=pridc,DC=com
> 
> when adding this syntax to the $dn and
> verified that cn is lastname\, Firstname.
> 
> objectClass is in TDI syntax 
>
["top","person","organizationalPerson","conta
ct"]
> 
> The error message I am getting is this:
> 
> javax.naming.InvalidNameException: CN=John\, 
> Doe,OU=TDI,DC=subdc,DC=pridc,DC=com: [LDAP: error code 34 - 00002081: 
> NameErr: DSID-03050AE0, problem 2003 (BAD_ATT_SYNTAX), data 0
> 
> I suspect it has to do with the CN syntax, but the customer is using 
> this syntax in their AD tree.
> 
> Hope some of you can help me with this.
> 
> Thanks in advance
Post Reply
Re: LDAP $dn syntax
Thu, 06 Dec 2007 05:16:41 +010
Christian,

Thanks,
I did map the cn: to Doe\, John.
After changing the syntax as you suggested it worked like a charm :)

Thanks alot for your help,

Max

Christian Chateauvieux wrote:
> Max,
> 
> in your CN mapping, do you specify the backslash? Try NOT to.
> 
> i.e
> 
> cn: Doe, John
> $dn: cn=Doe\, John, OU=TDI,DC=subdc,DC=pridc,DC=com
> 
> Please let us know if this helps.
> 
> Cheers,
> 
> Christian
> 
> Max Bakken wrote:
>> Hi,
>>
>> I got a problem inserting contacts into the active directory LDAP.
>> Im using the default LDAP connector, I suspect this is not a TDI 
>> problem but a LDAP syntax problem.
>>
>> The customer uses the following format in the AD LDAP.
>> CN=lastname\, Firstname,OU=TDI,DC=subdc,DC=pridc,DC=com
>>
>> when adding this syntax to the $dn and
>> verified that cn is lastname\, Firstname.
>>
>> objectClass is in TDI syntax 
>>
["top","person","organizationalPerson","conta
ct"]
>>
>> The error message I am getting is this:
>>
>> javax.naming.InvalidNameException: CN=John\, 
>> Doe,OU=TDI,DC=subdc,DC=pridc,DC=com: [LDAP: error code 34 - 00002081: 
>> NameErr: DSID-03050AE0, problem 2003 (BAD_ATT_SYNTAX), data 0
>>
>> I suspect it has to do with the CN syntax, but the customer is using 
>> this syntax in their AD tree.
>>
>> Hope some of you can help me with this.
>>
>> Thanks in advance
Post Reply
about | contact