> Source: [sk156012](https://support.checkpoint.com/results/sk/sk156012)

# sk156012 - Identities are quickly overwritten when using Identity Collector

| Property | Value |
|----------|-------|
| Solution ID | sk156012 |
| Date Created | 2019-06-17 |
| Last Modified | 2019-06-19 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Identities are quickly overwritten when using Identity Collector.

* PDP debug ('`pdp debug set all all`') shows that no Account Unit is defined, even tough there is one:  

  `
  [PID]@Hostname[12 Jun 22:40:56] get_account_unit_by_domain: No specific LDAP object for domain: example.com`  
  `
  [PID]@Hostname[12 Jun 22:40:56] Did not find AU for domain: example.com`  
  `
  [PID]@Hostname[12 Jun 22:40:56] au_realm_fetchuser_by_domain: Error: Domain example.com
  does not exist in any of gateway's or Realm's AUs
  `

* PDP debugs show a carriage return in domain field of the association:  

  ```
  
          :Association (
                  :User (user1)
                  :Ip (192.168.10.10)
                  :Domain ("example.com
  ")
                  :SourceType (AD)
                  :Time (1560393656)
                  :TTL (43218120)
                  :EventRecordID (17461356827)
          )
  ```

## Cause

Identity Collector processing end of line characters incorrectly.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content