Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Where can I find a listing of LDAP Active directory messages and there meanings?

I am getting the error:

LDAPException: Invalid Credentials (49) Invalid Credentials
LDAPException: Server Message: 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1
LDAPException: Matched DN:

Where is a list that lists:

  • Server Message: 80090308 and meaning?
  • LdapErr: DSID-0C0903A9 and meaning?
  • data 52e, v1db1 and meaning?
like image 529
GC_ Avatar asked May 10 '12 16:05

GC_


People also ask

What is difference between AD and LDAP?

AD is a directory service for Microsoft that makes important information about individuals available on a limited basis within a certain entity. Meanwhile, LDAP is a protocol not exclusive to Microsoft that allows users to query an AD and authenticate access to it.

What is LDAP database?

LDAP (Lightweight Directory Access Protocol) is a software protocol for enabling anyone to locate data about organizations, individuals and other resources such as files and devices in a network -- whether on the public Internet or on a corporate Intranet.

Is Active Directory an LDAP server?

Active Directory is a directory server that uses the LDAP protocol.

What is ldapv3?

The LDAP v3 (RFC 2251) is designed to address some of the limitations of the LDAP v2 in the areas of internationalization, authentication, referral, and deployment. It also allows new features to be added to the protocol without also requiring changes to the protocol. This is done by using extensions and controls.


2 Answers

Even I haven't yet the LDAP source of codes, indeed this will help you:

LDAP Error Code 49

Symptoms Users are unable to log in. The following appears in the atlassian-confluence.log: javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 701, v1db0]

Causes There could be many reasons for this issue. Please check the error code (in the example above, it's 701) and match it with the description in the following table:

Error Code Description

525 user not found

52e invalid credentials

530 not permitted to logon at this time

531 not permitted to logon at this workstation

532 password expired (remember to check the user set in osuser.xml also)

533 account disabled

701 account expired

773 user must reset password

775 user account locked

In the example above, the error code is 701 (account expired).

published at https://confluence.atlassian.com/display/CONFKB/User+directory+sync+fails+with+LDAP+Error+Code+49

like image 160
Jorge Ubeda Avatar answered Oct 08 '22 09:10

Jorge Ubeda


I'm not aware of a specific listing. The first number (49) is a standard Windows error code. You can use this tool http://www.microsoft.com/en-us/download/details.aspx?id=985 to look them up. Ignore the part about "Exchange".

The server message is also an error code - same tool as above.

DSIDs are pointers to the file and line number in the AD source code, so, without access to that it's not useful. Finaly the last two tidbits are just internal data from AD itself.

like image 31
Brian Desmond Avatar answered Oct 08 '22 08:10

Brian Desmond