Troubleshooting Tip: Unable to upgrade ADOM due to 'Fail (errno=-2):Distinguished name cannot be empty.' error

[jasonhong]

Description	This article describes how to troubleshoot when the user is unable to upgrade ADOM due to the 'Fail (errno=-2):Distinguished name cannot be empty.' error.
Scope	FortiManager.
Solution	The user may come across the following error when attempting to upgrade FortiManager ADOM: "Fail (errno=-2):Distinguished name cannot be empty." Users can run the following debug commands in FortiManager to obtain more details on the exact object that is causing the ADOM upgrade failure. diagnose debug service cdb 255 diagnose debug service dvmdb 255 diagnose debug enable          <----- Upgrade ADOM until the task tails. diagnose debug disable diagnose debug reset Below is a snippet from the debug output showing the LDAP server 'test' object causing the ADOM upgrade failure: 2024-01-21 12:33:03 copy user test LDAPS(soid=17008) to dparent=101, :fail. To correct the object error, ensure that the 'Server Name/IP' and 'Distinguished Name' fields are populated and save the changes. Subsequently, upgrade the ADOM again and verify if it is successful.