Page 1 of 1

LDAP integration and import users logon failure

Posted: Fri Jan 19, 2018 2:42 pm
by ikekim
Hi,

I configured my LDAP server and then I tried to logon to import the users from AD in Windows 2012 R2, but I get this logon failure message.

Unable to authenticate: 80090308: LdapErr: DSID-0C09042F, comment: AcceptSecurityContext error, data 52e, v2580

This is my config for one of my AD server for the LDAP setting
------------------------------------------------------------------------------
Base DN dc=abc,dc=local

LDAP Host 192.168.x.x (I also used ldap://192.168.x.x/)

LDAP port 389

Re: LDAP integration and import users logon failure

Posted: Fri Jan 19, 2018 4:56 pm
by cdienger
52e means bad credentials. Are there any special characters in the password? Another common requirement for ldap services is using the user's full dn ie cn=bob,cn=users,dc=abc,dc=local, to login.

If the above doesn't help follow https://support.nagios.com/kb/article/a ... n-600.html to enable some authentication debug logging.

Re: LDAP integration and import users logon failure

Posted: Wed Jan 24, 2018 10:28 am
by ikekim
@cdienger,

Yes, I use special character in my password(@), but how does this affect the logon?

Also, the LDAP server integration page is only asking for the base DN, not for the user so the part you mentioned about the user's DN is not expected in the config page or when logging on - let me know if I'm wrong.

My settings in the config page seems okay. How should it be different?

thanks.

Re: LDAP integration and import users logon failure

Posted: Wed Jan 24, 2018 3:12 pm
by dwhitfield
ikekim wrote: Yes, I use special character in my password(@), but how does this affect the logon?
They need to be escaped. What version of the LDAP component are you using? This may have already been fixed.