How To Fix SLDAP_ICM108 - Multiple LDAP Server entries (&1 and &2) cover "&3:&4" as referral target

SAP Error Message - Details

• Message type: E = Error

• Message class: SLDAP_ICM - ICM LDAP Plugin: Messages

• Message number: 108

• Message text: Multiple LDAP Server entries (&1 and &2) cover "&3:&4" as referral target

What causes this issue?

The ICM LDAP plug-in received a referral or search result reference, and
the LDAP server which generated it is not configured in LDAP server
customizing to implicitly trust all such objects.
Therefore, the combination of hostname and port was searched in the LDAP
server customizing with LDAP application type "Referral Target
(Whitelist)". During this process, multiple matching LDAP server entries
have been found.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

Ensure that only a single LDAP server entry of type "Referral Target
(Whitelist)" can be identified using the lookup rules (exact match wins,
non-exact matches are won by the entry with the longest host name
pattern).

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SLDAP_ICM108 - Multiple LDAP Server entries (&1 and &2) cover "&3:&4" as referral target ?

  The SAP error message SLDAP_ICM108 indicates that there are multiple LDAP server entries that are conflicting when trying to access a specific referral target. This typically occurs in scenarios where the SAP system is configured to connect to multiple LDAP servers, and both servers are trying to handle the same request for a specific resource.
  Cause:
  The error arises when:
  
  There are multiple LDAP server configurations in the SAP system that are set up to handle the same domain or resource.
  The LDAP servers are not properly configured to avoid overlapping responsibilities, leading to ambiguity in which server should handle the request.
  The LDAP server entries in the SAP system are not correctly prioritized or ordered.
  
  Solution:
  To resolve the SLDAP_ICM108 error, you can take the following steps:
  
  
  Review LDAP Configuration:
  
  Check the LDAP server entries in the SAP system. You can do this by navigating to the transaction code LDAP or SICF to review the configuration.
  Ensure that each LDAP server is configured to handle distinct domains or resources without overlap.
  
  
  
  Prioritize LDAP Servers:
  
  If multiple LDAP servers are necessary, ensure that they are prioritized correctly. You can set the order of LDAP servers in the configuration to ensure that the preferred server is contacted first.
  
  
  
  Remove Redundant Entries:
  
  If you find that certain LDAP server entries are redundant or not needed, consider removing them from the configuration to eliminate the conflict.
  
  
  
  Test Connectivity:
  
  After making changes, test the connectivity to the LDAP servers to ensure that the SAP system can successfully connect to the intended server without conflicts.
  
  
  
  Check for Updates:
  
  Ensure that your SAP system is up to date with the latest patches and updates, as there may be fixes related to LDAP handling in newer versions.
  
  
  
  Consult Documentation:
  
  Refer to the SAP documentation for LDAP integration for specific configuration guidelines and best practices.
  
  
  
  Related Information:
  
  SAP Notes: Check SAP Notes related to LDAP configuration and the specific error message for any additional insights or patches.
  Logs: Review the SAP system logs (transaction SM21) and the LDAP logs for more detailed error messages that can provide further context on the issue.
  SAP Community: Engage with the SAP Community forums for discussions related to LDAP issues, as other users may have encountered and resolved similar problems.
  
  By following these steps, you should be able to resolve the SLDAP_ICM108 error and ensure that your SAP system can connect to the appropriate LDAP server without conflicts.