sami's strat
2018-10-04 16:12:02 UTC
Having problems trying to get CheckMK to authenticate against AD. The
error Im seeing in /var/log/messages is:
Oct 4 11:30:01 mon01 nslcd[1191]: [f6f4fb] <group/member="root">
ldap_abandon() failed to abandon search: Can't contact LDAP server:
Transport endpoint is not connected
Here are some notes:
- My LDAP Serve is represented using a DNS name which resolves.
- From the client, I can connect to the LDAP port on Check. (no
firewall is blocking access to 389)
- The directory type I'm using is Active Directory.
But when I go to test I get "Unable to connect to LDAP server with the
configured binc credentials. Please fix this in the LDAP connection
settings.
Here is a command line test sample message:
[***@mon01 filebeat]# ldapsearch -x -b "dc=***,dc=***,dc=***" -D
"***@mydomain" -h 10.16.60.80 -W
'(&(proxyAddresses=smtp*)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))'
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
additional info: 80090308: LdapErr: DSID-0C09042A, comment:
AcceptSecurityContext error, data 52e, v3839
Any ideas....
TIA
error Im seeing in /var/log/messages is:
Oct 4 11:30:01 mon01 nslcd[1191]: [f6f4fb] <group/member="root">
ldap_abandon() failed to abandon search: Can't contact LDAP server:
Transport endpoint is not connected
Here are some notes:
- My LDAP Serve is represented using a DNS name which resolves.
- From the client, I can connect to the LDAP port on Check. (no
firewall is blocking access to 389)
- The directory type I'm using is Active Directory.
But when I go to test I get "Unable to connect to LDAP server with the
configured binc credentials. Please fix this in the LDAP connection
settings.
Here is a command line test sample message:
[***@mon01 filebeat]# ldapsearch -x -b "dc=***,dc=***,dc=***" -D
"***@mydomain" -h 10.16.60.80 -W
'(&(proxyAddresses=smtp*)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))'
Enter LDAP Password:
ldap_bind: Invalid credentials (49)
additional info: 80090308: LdapErr: DSID-0C09042A, comment:
AcceptSecurityContext error, data 52e, v3839
Any ideas....
TIA