Data codes related to ‘LDAP error code 49’ with Microsoft Active Directory

Problem

When BMC Remedy or AREasy accesses the LDAP (in this case Microsoft Active Directory), either to start the server or during configuration tasks, LDAP: error code 49 can be encountered. Symptom

The error shown below is similar each time there is an LDAP authentication issue.

“The exception is [ LDAP: error code 49 – 80090308: LdapErr: DSID-0Cxxxxxx, comment: AcceptSecurityContext error, data xxx, vece ].”

However, there are several values that can indicate what LDAP function is causing the issue. Here are some general references for Microsoft Active Directory:

The AD-specific error code is the one after “data” and before “vece” or “v893” in the actual error string returned to the binding process

525 user not found
52e invalid credentials
530 not permitted to logon at this time
531 not permitted to logon at this workstation
532 password expired
533 account disabled
701 account expired
773 user must reset password
775 user account locked

Leave a Reply