SAP Knowledge Base Article - Preview

2099794 - Account information not recognized: The Active Directory Authentication plugin does not support the mapping of Distribution Lists. Please ensure that all mapped groups are valid Security Groups.

Symptom

  • Certain Active Directory (AD) users are presented with an error message stating "Account information not recognized: The Active Directory Authentication plugin does not support the mapping of Distribution Lists. Please ensure that all mapped groups are valid Security Groups." Others notice the entire system seems very unresponsive and the lsass.exe process appears to spike on the cms machine causing degraded performance.
    CMS trace shows 
  • CMS Encountered error (The Active Directory Authentication plugin does not support the mapping of Distribution Lists. Please ensure that all mapped groups are valid Security Groups.) while trying to retrieve info for group: S-full-sid
  • All users in the groups receiving this error were unable to login
  • Important to note that we received a different error in the CMC  "invalid group name, cannot find group \ ADGROUPNAME", this error didn't appear in the CMS, the one abovce did. 


Read more...

Environment

SAP BusinessObjects Business Intelligence Platform 4.2 or 4.3 all versions potentially

Product

SAP BusinessObjects Enterprise XI 3.1

Keywords

lsass.exe lsass WindowsAD secwinAD WinAD AD WIN SLOW performance XI XI3 XI31 XI3.1 Security Group SECURITY_GROUP DL DISTRIBUTION_LIST , KBA , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.