Afaria Security - Active Directory "Invalid Search Root" issue

[former_member686053]

Hi,

I try to configure security section of Afaria 7 SP3  serveri

Altough I am  sure about  Directory Settings, such as, Server address, User and password, and Search Root, I get an error Invalid search root error.

I check on domain controller that my domain is : DC=yasar,DC=grp

And I write down to the afaria.

But get that error.

how can I debug or solve it?

[former_member686053 · Accepted solution]

When I use LDAP-based settings instead of Active Directory by using same parameters, it works.

Thnx all for your assistance

[former_member686053]

No need test my configuration. Because I use same parameter different LDAP search and the re is no problem . For example Firewall Identity awareness. Same user, same DC, same search  etc.

[Former Member]

Hi,

For Testing purpose can check with user and password with (Domain Admin right id).

[former_member686053]

I did it. But same result unfortunately.

[Former Member]

Hi,

Did you try re configuring the setting again on Afaria console setting >> security page.

If you are working on Afaria 7 SP4 version re install the Server component again and configured again at the time of installation.

Also check DNS ip address

[former_member686053]

I have Afaria SP3 Hfx 30

I try to reconfigure Afaria Server> Security page.

Check the DNS

But same  result ..

Server address: DCSERVER.domain.com

User: domainadmin@domain.com

password: blabla

Search root: dc=domain,dc=grp

Class Name for users:user

User Name Attributre: samaccountname

what is wrong in this configuration?

[Former Member]

Hi,

Can you confirm : Open Cmd and type NSlookup and check for the Server address DNS resolve

In Afaria security page did you try with ip address instead of fqdn

[Former Member]

You can also test your configuration using the LDP.exe tool from Microsoft.

Download it here:

http://technet.microsoft.com/en-us/library/cc772839(v=ws.10).aspx

BR

Peter

[Former Member]

Hi Peter,

Any idea with afaria 6.6 version we use to have the xsdirectorywizard.exe , any idea with afaria 7

[former_member686053]

NSlookup resolves DC server IP address. And resolves name from Ip address

[Former Member]

Hi,

Did you try with the tool posted by peter mohr.