Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-6014: ADEdit command ‘get_user_role_assignments’ cannot handle DN containing spaces

Centrify DirectControl ,  

12 April,16 at 10:57 AM

Applies to:

Centrify DirectControl 5.2.3 and older versions
 
Problem:

Running adedit command '
get_user_role_assignments' will return error Malformed DN "CN=XXX", missing DC= or /.

For example,
 

[root@RHEL64 ~]# adedit
>package require ade_lib
1.0
>bind domain.test Administrator
Administrator@DOMAIN.TEST's password:
>slz [adinfo zone]
>principal_to_dn "User Space@domain.test"
CN=User Space,CN=Users,DC=domain,DC=test
>get_user_role_assignments "CN=User Space,CN=Users,DC=domain,DC=test"
Malformed DN "CN=User", missing DC= or /

 
Cause:

This is a bug in ADEdit command ‘
get_user_role_assignments’ that cannot handle DN containing spaces properly.

Workaround

Replacing the
/usr/share/centrifydc/lib/ade_lib/ade_lib.tcl with the new ade_lib.tcl which is attached to this KB article.
 
Resolution:

Centrify has fixed above issue in Centrify DirectControl Suite 2016. 
Attachments:

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.