# Error messages with AD/Internal

**URL:** <https://forum.inductiveautomation.com/t/error-messages-with-ad-internal/9423>\
**Category:** Ignition\
**Created:** [December 10, 2014, 4:01am UTC](https://forum.inductiveautomation.com/t/error-messages-with-ad-internal/9423 "2014-12-10T04:01:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![aschaef](https://avatars.discourse-cdn.com/v4/letter/a/bbce88/32.png) [@aschaef](https://forum.inductiveautomation.com/u/aschaef)\
**Post date:** [December 10, 2014, 4:01am UTC](https://forum.inductiveautomation.com/t/error-messages-with-ad-internal/9423/1 "2014-12-10T04:01:46Z")

</div>

I’m trying to clean up a messy project which was using multiple tables to host user accounts. I have switched the project to AD/Internal Hybrid so I can manage the roles in Ignition and use AD for authentication. When I try to pull up the list of users in the designer in order to assign them to roles I don’t see any users listed. I can see the following error in the console:

[LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903C5, comment: AcceptSecurityContext error, data 52e, v23f0

I am able to successfully verify the authentication profile with domain credentials. Any ideas what might be going on?

---

<div class="post-metadata">

**Author:** ![aschaef](https://avatars.discourse-cdn.com/v4/letter/a/bbce88/32.png) [@aschaef](https://forum.inductiveautomation.com/u/aschaef)\
**Post date:** [December 10, 2014, 4:20am UTC](https://forum.inductiveautomation.com/t/error-messages-with-ad-internal/9423/2 "2014-12-10T04:20:29Z")

</div>

Never mind. I figured out what I was doing wrong, I just got thrown off by the verification working.

I kept using domain\ldap\_read or [ldap\_read@domain.com](mailto:ldap_read@domain.com) as the username for the LDAP lookup. It required removing the domain reference all together and just using ldap\_read…