IBM Support

CAM-AAA-0056 upon authentication to LDAP Namespace

Troubleshooting


Problem

Unable to log in to a LDAP Namespace.  Error Message: CAM-AAA-0056 Unable to Authenticate

Diagnosing The Problem

.

Resolving The Problem

Correct the User Lookup and/or the ExternalIdentityMapping field and read carefully to construct the LDAP Searchstring by hand.
Care must be taken to ensure correct use of either Filter-Syntax (using brackets) or plain Syntax (concatenation with Base DN).

In Cognos Configuration check the following attributes of the LDAP Provider User Lookup :
-There are two possibilities of how to specify this property. If the Base DN points to an Entry under which all User Entries can be found use the Syntax without brackets like cn={$userID}. This way the Base-DN and the User lookup are simply concatenated.
If the Base DN is pointing to an entry under which there are several subtrees containing Userentries use the Filter-Syntax using Brackets like (cn=${userID}). The cn= portion of the string is mandatory.

- Account Object Class: Ensure this maps to the objectclass which identifies an user entry. This may be person (IPlanet) or User (Novell).
- User Name: This sometimes is altered to something else. uid, cn are examples.
- ExternalIdentityMapping example: (sAMAccountName=${replace(${environment("REMOTE_USER")}, "COGNOS\\","")})

[{"Product":{"code":"SSTSF6","label":"IBM Cognos Analytics"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Administration and Configuration v11x","Platform":[{"code":"PF033","label":"Windows"}],"Version":"11.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
15 June 2018

UID

swg22010357