-
Titel
Common LDAP errors in Foglight -
Beschreibung
When working with LDAP in Foglight, the following error appears in the FMS log. What does that mean?
DEBUG [http-0.0.0.0-8443-1] com.quest.nitro.service.security.auth.spi.NitroExtendedLdapLoginModule - Failed to validate password.javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece ].
-
Lösung
The error shown below is similar each time, there is an LDAP authentication issue.
The exception is:
[LDAP: error code 49 - 80090308: LdapErr: DSID-0Cxxxxxx, comment: AcceptSecurityContext error, data xxx, vece ].
However there are several values that can indicate what LDAP function is causing the issue. Here are some general references for Microsoft Active Directory:
The AD-specific error code is the one after "data" and before "vece" or "v893" in the actual error string returned to the binding process
525 user not found
52e invalid credentials
52f check GPO settings for user or whether it's part of Protected Users Group
530 not permitted to logon at this time
531 not permitted to logon at this workstation
532 password expired
533 account disabled
701 account expired
773 user must reset password
775 user account locked