The following error may be seen in the Metadata Server log file when 
using LDAP as the authentication provider. 
 
  Error:  Access Denied. 
  New client connection (10) rejected from server port 8561 for user 
  user@domain. 
 
This problem has been encountered when the person entry LDAP attribute 
that stores the user ID contains "cn" instead of the default value of 

"uid". 
 
To correct the problem, set the environment variable, LDAP_IDATTR, to 
the value of "cn" and restart the Metadata Server. 
 
On Windows the variable can be set in the Metadata Server configuration 
file located by default in c:SAS&ltplan filename>Lev1 
SASMainMetadataServersasv9_MetadataServer.cfg where &ltplan filename> is 
the name of the plan.xml file used during installation. 
 
For example: 
 
   -set LDAP_IDATTR "cn" 
 
On UNIX the variable can be set in the the MetadataServer.sh shell 
script located in .../Lev1/SASMain/MetadataServer/ MetadataServer.sh. 
 
For example: 
 
   LDAP_IDATTR="cn" 
   export LDAP_IDATTR 
 
For instructions on setting environment variables on Z/OS, see 
Implementing Alternative Authentication Providers in the SAS® 9.1.3 
Integration Technologies:  Server Administrator's Guide for instructions 
on setting environment variables on Z/OS. 

Operating System and Release Information