Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. Error when you try to run the Windows Azure Active Directory Sync tool: "LDAP injection characters were found in the user alias"

Error when you try to run the Windows Azure Active Directory Sync tool: "LDAP injection characters were found in the user alias"

View products that this article applies to.

Problem

When you try to run the Windows Azure Active Directory Sync tool, you receive an email message that resembles the following:
Hello user@<DomainName>.com,

See Directory Synchronization Errors for more information about the errors listed in this e-mail message.

The Directory Synchronization batch run was completed on <Date Month Year Time.>

The following objects encountered errors during synchronization.

Alias Error Description Object GUIDResearch/Development LDAP injection characters were found in the user alias. Change the user alias in the on-premises Active Directory. CN={788ef08b-cf9b-4aec-ac10-5995226a88b7}

↑ Back to the top

Cause

This issue can occur if an on-premises user object includes one of the following characters in its primary SMTP email address:
  • Asterisk (*)
  • Braces ({ })
  • Slash mark (/)
  • Opening single curly quotation mark (`)
  • Percent (%)
  • Equal sign (=)
  • Vertical bar (|)
  • Question mark (?)
  • Exclamation mark (!)
  • Period (.)

↑ Back to the top

Solution

To resolve this issue, change the on-premises user's primary SMTP address by removing the character that's causing the issue. After the character is removed, directory synchronization will use the string in the new primary SMTP proxy address to create the user's user principal name (UPN) and primary SMTP address.

↑ Back to the top


Still need help? Go to the Office 365 Community website or the Windows Azure Active Directory Forums website.

↑ Back to the top

Keywords: pre-upgrade, o365a, o365e, o365m, o365022013, after, upgrade, o365062011, o365, KB2425774

↑ Back to the top

Article Info
Article ID : 2425774
Revision : 30
Created on : 10/31/2013
Published on : 10/31/2013
Exists online : False
Views : 582