Identity federation synchronization failure alert in StorageGRID for failed to verify certificate
Applies to
NetApp StorageGRID
Issue
- StorageGRID reports
Identity federation synchronization failurealert and may self-resolve. /var/local/log/bycast.logrecords a failure to connect to the LDAP server due to certificate failure:
ERROR: Failed to connect to LDAP server with error (Unable to connect, verify your hostname, port, and TLS configuration: LDAP Result Code 200 "Network Error": tls: failed to verify certificate: x509: certificate signed by unknown authority)
WARNING: Failed to create new connection to "ab.cdef.net:636" with error (Unable to connect, verify your hostname, port, and TLS configuration: LDAP Result Code 200 "Network Error": tls: failed to verify certificate: x509: certificate signed by unknown authority)
WARNING: Error while synchronizing account "123456789": Unable to connect, verify your hostname, port, and TLS configuration: LDAP Result Code 200 "Network Error": tls: failed to verify certificate: x509: certificate signed by unknown authority
WARNING: Failed to search LDAP server "ab.cdef.net:636" with request (&ldap.SearchRequest{BaseDN:"CN=abc-de_user,OU=UserGroup,DC=cdef,DC=net", Scope:0, DerefAliases:0, SizeLimit:1000, TimeLimit:60, TypesOnly:false, Filter:"(|(objectClass=group)(objectClass=groupOfNames)(objectClass=groupOfUniqueNames)(objectClass=posixGroup))", Attributes:[]string{"cn", "objectGUID", "sAMAccountName", "memberOf"}, Controls:[]ldap.Control(nil)}) and error (LDAP Result Code 10 "Referral": 0000202B: RefErr: DSID-0310079C, data 0, 1 access points#012#011ref 1: 'cdef.net'#012#000)
WARNING: Skipping synchronization of group "CN=abc-de_user,OU=UserGroup,DC=cdef,DC=net": LDAP Result Code 10 "Referral": 0000202B: RefErr: DSID-0310079C, data 0, 1 access points#012#011ref 1: 'cdef.net'#012#000
