LDAP authentication check failing on ONTAP cluster
This knowledge base was generated through a script and may contain formatting issues. For the accurate content, please refer to the WIP editor. WIP editor.
Applies to
- ONTAP 9
- LDAP/LDAPS
Issue
- LDAP authentication validation fails on the ONTAP cluster.
- LDAP users are unable to authenticate successfully.
- LDAP connectivity checks to the configured LDAP servers report failures.
- User lookup and authentication requests fails.
- Example Error Output:
cluster::*> ldap check -vserver svm01 Vserver: svm01Client Configuration Name: LDAP_config LDAP Status: down LDAP Status Details: Error: Validate the Ldap configuration procedure failed [ 13 ms] Resolved LDAP servers: 10.xx.xx.xx, 10.xx.xx.xx. Vserver: 2**[ 177] FAILURE: Could not authenticate as** 'user@domain.COM': Cannot find KDC for** requested realm (KRB5_REALM_UNKNOWN) [ 2182] TCP connection to ip 10.xx.xx.xx, port 636 failed: Operation timed out. [ 2183] Unable to start LDAPS: Can't contact LDAP server [ 2183] Unable to connect to LDAP (NIS & Name Mapping) service on <server> (Error: Can't contact LDAP server) [ 2193] Could not authenticate as 'user@domain.COM': Cannot find KDC for requested realm (KRB5_REALM_UNKNOWN) [ 4193] TCP connection to ip 10.xx.xx.xx, port 636 failed: Operation timed out. [ 4195] Unable to start LDAPS: Can't contact LDAP server [ 4195] Unable to connect to LDAP (NIS & Name Mapping) service on <server> (Error: Can't contact LDAP server) [ 4196] No servers available for LDAP_NIS_AND_NAME_MAPPING, vserver: 2, domain: . [ 4196] Unable to make a connection (LDAP (NIS & Name Mapping):), Result: RESULT_ERROR_SECD_NO_SERVER_AVAILABLE LDAP DN Status Details: No LDAP DN configured
