Discussion:
[Check_mk (english)] CheckMK / AD Authentication
sami's strat
2018-10-04 16:12:02 UTC
Permalink
Having problems trying to get CheckMK to authenticate against AD. The
error Im seeing in /var/log/messages is:

Oct 4 11:30:01 mon01 nslcd[1191]: [f6f4fb] <group/member="root">
ldap_abandon() failed to abandon search: Can't contact LDAP server:
Transport endpoint is not connected

Here are some notes:

- My LDAP Serve is represented using a DNS name which resolves.
- From the client, I can connect to the LDAP port on Check. (no
firewall is blocking access to 389)
- The directory type I'm using is Active Directory.

But when I go to test I get "Unable to connect to LDAP server with the
configured binc credentials. Please fix this in the LDAP connection
settings.

Here is a command line test sample message:

[***@mon01 filebeat]# ldapsearch -x -b "dc=***,dc=***,dc=***" -D
"***@mydomain" -h 10.16.60.80 -W
'(&(proxyAddresses=smtp*)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))'
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
additional info: 80090308: LdapErr: DSID-0C09042A, comment:
AcceptSecurityContext error, data 52e, v3839

Any ideas....

TIA

Loading...