LDAP Search Fails if Set to CN

  • 3661841
  • 20-Nov-2007
  • 26-Apr-2012

Environment

Novell SecureLogin
NSL6.0.110
Installed in LDAP mode
LDAP database set to MicroSoft ADAM

Situation

LDAP Search fails if LDAP search attributes registry key below is set to search on CN.
Search works if regkey is set to DN or UID

HKEY_LOCAL_MACHINE\SOFTWARE\Novell\Login\LDAP\LDAPSearch\SearchAttributes
REG_MULTI_SZ value, set to list of search attributes to be used in LDAP search. Only first five attributes are considered. The valid attributes are "fullName", "givenName", "sn", "cn", and "uid".

Resolution

Verify that that the CN attribute is available in the ADAM database.
In this case the ADAM database was created without a CN attribute.

Either contact MicroSoft for help fixing ADAM or
Search on a different attribute