KB44183: "Incorrect login/password" error message appears when logging into Desktop using LDAP authentication through Microsoft Active Directory

• Strategy

When logging in to MicroStrategy Desktop using LDAP authentication or when testing LDAP authentication, an "Incorrect login/password" error message is encountered. Furthermore, the Authentication Server trace shows the following error: LDAP authentication trace: Failure in search LDAP user based on filter '(&(objectclass=person) (sAMAccountName=<username>))' and search root '''. (LDAP error 32: No Such Object)

SYMPTOM:

When logging in to Strategy Desktop using LDAP authentication or when testing LDAP authentication, an "Incorrect login/password" error message is encountered. Furthermore, the Authentication Server trace shows the following error:


LDAP authentication trace: Failure in search LDAP user based on filter '(&(objectclass=person) (sAMAccountName=<username>))' and search root '''. (LDAP error 32: No Such Object)

CAUSE:

By default, the "Search root distinguished name (DN)" field is left blank. If a root distinguished name is not provided, the Intelligence Server searches the entire LDAP tree for the user. However, some LDAP vendors, such as Microsoft Active Directory, require that the search root is not the base of the LDAP tree structure.

ACTION:

Define an LDAP search root in the LDAP filters configuration panel located under Strategy Intelligence Server configuration > LDAP > Filters > Search Settings. Additional information about this setting is available in the Strategy System Administration Guide in the section discussing the LDAP search root.

Comment

0 comments

Details

Knowledge Article

Published:

June 2, 2017

Last Updated:

June 2, 2017