Skip to main content
NetApp Knowledge Base

Identity federation synchronization failure observed infrequently on StorageGRID

Views:
718
Visibility:
Public
Votes:
0
Category:
storagegrid
Specialty:
sgrid
Last Updated:

Applies to

NetApp StorageGRID 11.4 and above

Issue

StorageGRID reports alert Identify federation synchronization failure every few hours.

Primary Admin node logs in /var/local/log/bycast-err.log may report:

ERROR: Failed to connect to LDAP server with error (Unable to connect, verify your hostname, port, and TLS configuration: Failed DNS lookup for IPs of host "server_name")
 
ERROR   Validation failed. Please check the values you entered for errors. The LDAP server could not be reached. Review your configuration for errors. Unable to begin TLS, verify your certificate and TLS configuration: Failed to parse certificate for server authentication (MgmtApi::LocalizedValidationError)

Storage nodes that host the ADC nodes logs in /var/local/log/bycast.log may report :

DATE <ADC NODE NAME> idnt[5710]: [synchronize.go:231:41c14eca3baaf4f9] WARNING: Error while synchronizing account "<TENANT ID>": Unable to connect, verify your hostname, port, and TLS configuration: LDAP Result Code 200 "Network Error": dial tcp <LDAP IP>:389: i/o timeout

  • LDAP(s) access works in StorageGRID
  • Test connection under Access Control > Identity Federation > LDAP server works

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.