戻る
-
タイトル
"A more secure authentication method is required for this server" is found in the Coordinator logs after installing the Coordinator. -
説明
After installing the Coordinator it is not functioning correctly. The Coordinator logs show the error "A more secure authentication method is required for this server" and the Coordinator SCPs (CN=Quest.ChangeAuditor.Coordinator, CN=Quest.ChangeAuditor.Repository) are not created.
-
原因
The Domain Controllers have LDAP signing enabled, however the server that the Coordinator is installed on has the local security policy, Network security -> LDAP client signing requirements, set to "none". This instead should be set to Negotiate. -
対策
Set LDAP Client signing to Negotiate by using a GPO (gpmc.msc) or directly modifying the local Security Settings (gpedit.msc) of the Coordinator server:
- Expand Computer Configuration | Windows Settings | Security Settings | Local Policies | Security Option
- Scroll down and double click Network Security: LDAP client signing requirements
- Click the drop down and select Negotiate signing
- Save the settings
- Reboot the Coordinator server to ensure the new settings are applied