topic Re: Error when configuring LDAP authentication over SSL to Windows 2012R2 Active Directory in Getting Data In https://community.splunk.com/t5/Getting-Data-In/Error-when-configuring-LDAP-authentication-over-SSL-to-Windows/m-p/326431#M93436 <P>Can you try to concat the cert into a single pem file, and then add the following.</P> <PRE><CODE>TLS_REQCERT never TLS_CACERT /opt/splunk/etc/openldap/certs/Your_Concat_Cert.pem #TLS_CACERTDIR /opt/splunk/etc/openldap/certs </CODE></PRE> Thu, 25 Jan 2018 01:22:33 GMT daniel_splunk 2018-01-25T01:22:33Z Error when configuring LDAP authentication over SSL to Windows 2012R2 Active Directory https://community.splunk.com/t5/Getting-Data-In/Error-when-configuring-LDAP-authentication-over-SSL-to-Windows/m-p/326430#M93435 <P>I tried to enable LDAP over SSL to Windows 2012R2 Active Directory via port 636, got the following error message.</P> <PRE><CODE>01-11-2018 15:44:18.528 +0800 DEBUG ScopedLDAPConnection - strategy="LDAP Lab" Initializing with LDAPURL="ldaps://10.10.10.30:636" 01-11-2018 15:44:18.528 +0800 DEBUG ScopedLDAPConnection - strategy="LDAP Lab" Attempting bind as DN="cn=svc_splunk_to_ad,ou=my_company,ou=users,ou=systems,dc=com" 01-11-2018 15:44:18.528 +0800 ERROR ScopedLDAPConnection - strategy="LDAP Lab" Error binding to LDAP. reason="Can't contact LDAP server" 01-11-2018 15:44:18.528 +0800 DEBUG ScopedLDAPConnection - strategy="LDAP Lab" Successfully performed unbind </CODE></PRE> <P>Run the following command and confirmed that LDAP are able to connect using TLS1.1 and TLS1.2</P> <P>splunk cmd openssl s_client -tls1_1 -connect 10.10.10.30:636<BR /> splunk cmd openssl s_client -tls1_2 -connect 10.10.10.30:636</P> <P>Below is the $SPLUNK_HOME/etc/openldap/ldap.conf </P> <PRE><CODE>TLS_PROTOCOL_MIN 3.3 TLS_CIPHER_SUITE ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA- AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256 TLS_CACERT /opt/splunk/etc/openldap/certs/certnew.cer TLS_CACERTDIR /opt/splunk/etc/openldap/certs </CODE></PRE> <P>Any idea about this?</P> Tue, 29 Sep 2020 17:47:48 GMT https://community.splunk.com/t5/Getting-Data-In/Error-when-configuring-LDAP-authentication-over-SSL-to-Windows/m-p/326430#M93435 daniel_splunk 2020-09-29T17:47:48Z Re: Error when configuring LDAP authentication over SSL to Windows 2012R2 Active Directory https://community.splunk.com/t5/Getting-Data-In/Error-when-configuring-LDAP-authentication-over-SSL-to-Windows/m-p/326431#M93436 <P>Can you try to concat the cert into a single pem file, and then add the following.</P> <PRE><CODE>TLS_REQCERT never TLS_CACERT /opt/splunk/etc/openldap/certs/Your_Concat_Cert.pem #TLS_CACERTDIR /opt/splunk/etc/openldap/certs </CODE></PRE> Thu, 25 Jan 2018 01:22:33 GMT https://community.splunk.com/t5/Getting-Data-In/Error-when-configuring-LDAP-authentication-over-SSL-to-Windows/m-p/326431#M93436 daniel_splunk 2018-01-25T01:22:33Z