"No mapping between account names and security IDs was done" in AzMan API

From: Sanjaya Amarasekera (cronysl_at_yahoo.com)
Date: 09/20/05

  • Next message: MCSEGURU: "Re: Can i run more then one session on the computer?"
    Date: Tue, 20 Sep 2005 15:30:19 +0600
    
    

    Hi,

    I want to create a user in ADAM and manage his authorization using
    authorization Manager.

    But when I try to add a user in ADAM to an Application Group using AzMan
    API, it throws the following COM exception "No mapping between account names
    and security IDs was done".

    Therefore I'm unable to add users who are created in ADAM to an Application
    Group using AzMan API. Why does this exception occur?

    When I manually add a user in ADAM to an Application Group, the
    Authorization Manager Snap-In shows him as an unknown type. Also, the Azman
    API Only returns the SID of the user when I try to get the user's name using
    ApplicationGroup's MembersName list. Why does this happen? How can I get
    ADAM users name using AzMan API?

    What type of user should I create in ADAM in order to use him in Application
    Groups (user? person? organizationalPerson? or foreignSecurityPrincipal ? )

    Do I need to set any of the parameters to a specific value?

    When I add Windows/Domain user to an Application Group, it reflects as a
    foreignSecurityPrincipal in ADAM. But when I try to create
    foreignSecurityPrincipal in ADAM it gives various errors. How can I create a
    foreignSecurityPrincipal in ADAM?

    What is the standard way of creating a user in ADAM and add him to an
    Application Group in Authorization Manager?

    Regards,
    Sanjaya.


  • Next message: MCSEGURU: "Re: Can i run more then one session on the computer?"

    Relevant Pages

    • Re: Authorization Manager and ADAM
      ... Oh, btw, don't forget to import ms-azman.ldf when you install the instance. ... ADAM ADSI Edit shows everything to be correct. ... Then right click Authorization Manager, New Store, ... >>> thus far to create an Authorization Store within ADAM. ...
      (microsoft.public.windows.server.general)
    • Re: Authorization Manager and ADAM
      ... Oh, btw, don't forget to import ms-azman.ldf when you install the instance. ... ADAM ADSI Edit shows everything to be correct. ... Then right click Authorization Manager, New Store, ... >>> thus far to create an Authorization Store within ADAM. ...
      (microsoft.public.windows.server.active_directory)
    • Re: Authorization Manager and ADAM
      ... Oh, btw, don't forget to import ms-azman.ldf when you install the instance. ... ADAM ADSI Edit shows everything to be correct. ... Then right click Authorization Manager, New Store, ... >>> thus far to create an Authorization Store within ADAM. ...
      (microsoft.public.windows.server.security)
    • Re: ADAM and Authorization Manager on XP
      ... > Assuming that you have created an application directory partition ... > Then right click Authorization Manager, New Store, then the AD ... > on the ADAM instance and that the ADAM instance is on ADAMServer ...
      (microsoft.public.windows.server.active_directory)
    • Re: Must ADAM be installed on every machine?
      ... I'm actually not much of an AzMan expert either as I've never built anything ... It does seem to me like something is very wrong if you need an ADAM instance ... >I do not have any AzMan stuff in production so I cannot offer ... >> Authorization Manager idea. ...
      (microsoft.public.windows.server.active_directory)