LDAP integration and import users logon failure

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
ikekim
Posts: 85
Joined: Wed Aug 16, 2017 12:21 pm

LDAP integration and import users logon failure

Post by ikekim »

Hi,

I configured my LDAP server and then I tried to logon to import the users from AD in Windows 2012 R2, but I get this logon failure message.

Unable to authenticate: 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580

This is my config for one of my AD server for the LDAP setting
------------------------------------------------------------------------------
Base DN dc=abc,dc=local

LDAP Host 192.168.x.x (I also used ldap://192.168.x.x/)

LDAP port 389
User avatar
cdienger
Support Tech
Posts: 5045
Joined: Tue Feb 07, 2017 11:26 am

Re: LDAP integration and import users logon failure

Post by cdienger »

52e means bad credentials. Are there any special characters in the password? Another common requirement for ldap services is using the user's full dn ie cn=bob,cn=users,dc=abc,dc=local, to login.

If the above doesn't help follow https://support.nagios.com/kb/article/a ... n-600.html to enable some authentication debug logging.
As of May 25th, 2018, all communications with Nagios Enterprises and its employees are covered under our new Privacy Policy.
ikekim
Posts: 85
Joined: Wed Aug 16, 2017 12:21 pm

Re: LDAP integration and import users logon failure

Post by ikekim »

@cdienger,

Yes, I use special character in my password(@), but how does this affect the logon?

Also, the LDAP server integration page is only asking for the base DN, not for the user so the part you mentioned about the user's DN is not expected in the config page or when logging on - let me know if I'm wrong.

My settings in the config page seems okay. How should it be different?

thanks.
dwhitfield
Former Nagios Staff
Posts: 4583
Joined: Wed Sep 21, 2016 10:29 am
Location: NoLo, Minneapolis, MN
Contact:

Re: LDAP integration and import users logon failure

Post by dwhitfield »

ikekim wrote: Yes, I use special character in my password(@), but how does this affect the logon?
They need to be escaped. What version of the LDAP component are you using? This may have already been fixed.
Locked