> Source: [sk179755](https://support.checkpoint.com/results/sk/sk179755)

# sk179755 - Identity Awareness logs do not show users acquired from an Identity Collector

| Property | Value |
|----------|-------|
| Solution ID | sk179755 |
| Date Created | 2022-08-02 |
| Last Modified | 2025-01-08 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Identity Awareness logs do not show users acquired from an Identity Collector.

* The output of the "*pdp debug* " in the *$FWDIR/log/pdpd.elg* file shows:

  `[PID TID]@HOSTNAME[DATE and TIME] server = <SERVER_FQDN>, SDK Response <code = 49, message = Invalid credentials , Error Message = 80090308: LdapErr: DSID-0C090447, comment: AcceptSecurityContext error, data 52e, v3839>`  
  `
  [PID TID]@HOSTNAME[DATE and TIME] server = <SERVER_FQDN>, Connect result = Failed to authenticate`

  <br />

* Check traffic capture from gateway, we would see "**LDAP: error code 49** - XXXXXXXX: LdapErr: **DSID-0C090439**, comment: AcceptSecurityContext error"

  (tcpdump with option '-A' will print raw text of non-encrypted ldap query.)
* When customer defined LDAP account unit for each AD domain in SmartConsole. This also fit for some cases that customer has users not able to match identity from same one domain, while with other users in different AD domains has no issue.

## Cause

Login Domain Name (DN) is different from the AD branch configured in the LDAP Account Unit object.   

Example:

1. The Login Domain Name is:

   **login_dn ("CN=1,CN=2,DC=3,DC=4,DC=5,DC=6,DC=7")**
2. The branch in the LDAP Account Unit shows only this:

   **DC=4,DC=5,DC=6,DC=7**

   The required AD branch must also contain the part "DC=3":

   **DC=3,DC=4,DC=5,DC=6,DC=7**

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content