BusinessObjects Board

LDAP user sync not adding users to groups; Login error FWM00029

server administration
#1

Hi all,
we try to set up a 4.3 SP4 system on AWS (Windows) using LDAP authentication.
We get a very strange behaviour:

  • We add an LDAP group to be syncronized
  • The group is created correctly in SAP BI.
  • The new users in the LDAP group are also created and their alias is an LDAP alias.
    so far so good… but:
    The users do not get added to the synched LDAP group!
    So the very strange effect is that the users are created, they have an LDAPP alias (but not Enterprise!), however they only are members of the everyone group.
    And when they try to login using LDAP, the error message is
    Error: Account Information Not Recognized: Logon failed. Please make sure you are a member of a valid mapped group. (FWB 00029)

Has anyone come across this very strange behaviour?

A few more pieces of information:

  • The LDAP config is exactlly the same as in a previous 4.2 SP9 system where it works perfectly fine
  • The new system is on AWS, Winsows Serever 2022
  • Repo Database is on Oracle

Thanks a lot in advance for any suggestions, we are out of ideas…

Best regards

Felix

#2

Today, we found the solution:
It seems that 4.3 SP4 Patch 600 fixes the problem.
After the upgrade, the users were synched into the groups and LDAP authentication was possible in the login.
Hopefully, this is helpful to others.

Cheers

Felix

1 Like