SANtricity timeout accessing LDAPS server
Applies to
- SANtricity System Manager
- LDAPS (secure LDAP)
- One-way trust Domains
Issue
- High latency/timeouts observed on LDAPS authentication
- No issues observed using regular LDAP
- Webserver-trace-logs will show:
2023-10-20 13:36:14,110 INFO [jetty-253795] c.n.e.a.r.s.LdapImpl [LoggingFilter.java:416] [requestId=165ab4d6-7092-4106-990c-b7e8c439ac92, deviceId=1] {"authId":"64E85ABC5ED718AA07FDF7FD385596DD46D53F4315C312FEB2182C1B","authType":"localAccount","resource":"/devmgr/v2/storage-systems/1/ldap/test","remoteAddress":"10.xxxxxx","method":"POST","query":null,"status":"200","executionTime":"10046"}
2023-10-20 13:36:25,532 WARN [jetty-253864] c.n.e.a.d.LdapConfigChangeService [LdapConfigChangeService.java:504] [requestId=24cb5063-b59e-4ec9-88e7-4f9bd339ad47, deviceId=1] Communication exception while testing LDAP domain
java.net.SocketTimeoutException: Read timed out
- Packet trace will show 10+ seconds delay between storage controller issuing
ChangeCipherSpec
and LDAP server response.