Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-6014: ADEdit command ‘get_user_role_assignments’ cannot handle DN containing spaces

Authentication Service ,  

12 April,16 at 10:57 AM

Applies to:

Centrify DirectControl 5.2.3 and older versions

Running adedit command '
get_user_role_assignments' will return error Malformed DN "CN=XXX", missing DC= or /.

For example,

[root@RHEL64 ~]# adedit
>package require ade_lib
>bind domain.test Administrator
Administrator@DOMAIN.TEST's password:
>slz [adinfo zone]
>principal_to_dn "User Space@domain.test"
CN=User Space,CN=Users,DC=domain,DC=test
>get_user_role_assignments "CN=User Space,CN=Users,DC=domain,DC=test"
Malformed DN "CN=User", missing DC= or /


This is a bug in ADEdit command ‘
get_user_role_assignments’ that cannot handle DN containing spaces properly.


Replacing the
/usr/share/centrifydc/lib/ade_lib/ade_lib.tcl with the new ade_lib.tcl which is attached to this KB article.

Centrify has fixed above issue in Centrify DirectControl Suite 2016.