Restituisci
-
Titolo
"A more secure authentication method is required for this server" is found in the Coordinator logs after installing the Coordinator. -
Descrizione
After installing the Coordinator it is not functioning correctly. The Coordinator logs show the error "A more secure authentication method is required for this server" and the Coordinator SCPs (CN=Quest.ChangeAuditor.Coordinator, CN=Quest.ChangeAuditor.Repository) are not created.
-
Causa
The Domain Controllers have LDAP signing enabled, however the server that the Coordinator is installed on has the local security policy, Network security -> LDAP client signing requirements, set to "none". This instead should be set to Negotiate. -
Risoluzione
Set LDAP Client signing to Negotiate by using a GPO (gpmc.msc) or directly modifying the local Security Settings (gpedit.msc) of the Coordinator server:
- Expand Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Option
- Scroll down and double click Network Security: LDAP client signing requirements
- Click the drop down and select Negotiate signing
- Save the settings
- Reboot the Coordinator server to ensure the new settings are applied