My splunk version is 6.1.4 bulid 233537
My Splunk App for Windows Infrastructure version is 1.0.4
When I want to create this report "Active Directory -->users-->User report-->Active", it show this error message......
"External search command 'ldapfilter' returned error code 1. Script output = " ERROR "LDAPOperationsErrorResult - 1 - operationsError - None - 000004DC: LdapErr: DSID-0C090724, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v23f0"
How can I fix it !!!!! please help me ,thank you.....
And you have configured everything accourding to the documentation;
and you have checked the following part of it:
This is ldap operating log....
File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/packages/splunklib/searchcommands/search_command.py", line 316, in process self._execute(operation, reader, writer) File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/packages/splunklib/searchcommands/generating_command.py", line 79, in _execute for record in operation(): File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/ldapsearch.py", line 87, in generate password=configuration.credentials.password) as connection: File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/packages/ldap3/core/connection.py", line 264, in __enter__ self.open() File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/packages/ldap3/strategy/syncWait.py", line 51, in open BaseStrategy.open(self, reset_usage) File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/packages/ldap3/strategy/baseStrategy.py", line 90, in open self._open_socket(self.connection.server.ssl) File "/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/packages/ldap3/strategy/baseStrategy.py", line 130, in _open_socket raise communication_exception_factory(LDAPSocketOpenError, exc)(self.connection.last_error) LDAPSocketOpenError: socket creation error: [Errno -2] Name or service not known
Now.......the error log show "External search command 'ldapsearch' returned error code 1. Script output = " ERROR "LDAPSocketOpenError at ""/opt/sbox/splunk/etc/apps/SA-ldapsearch/bin/packages/ldap3/strategy/baseStrategy.py"", line 130 : socket creation error: [Errno -2] Name or service not known"
Can someone help me to solve this question~~~~
Check here: (even if it is not the latest, it is the same settings)
Note: I am familiar with LDAP and AD/LDAP, not with the App in question.
Have you provided "ldapfilter" a valid login and password to access AD? Note that you probably need to provide the full DN of the user, as seen via LDAP. Test the LDAP BIND via an "ldapsearch" (on Linux), like:
ldapsearch -xh your.ad.host.example.com -p tcp.port.of.AD-LDAP.example.com -D "DN of the user best with double quotes" -W -b