Security

Error binding to LDAP

sysvault
New Member

ERROR ScopedLDAPConnection - strategy="ldap-server-name" Error binding to LDAP. reason="Invalid credentials"

The message above comes up frequently in the splunkd.log.
Authentication is currently set to anonymously bind.
LDAP users are successfully able to login to splunk.

I've tried creating an account for splunk to use for Bind DN to see if that would resolve the issue but those entries kept coming up.
At the moment LDAP auth works with anonymous bind but the logs are just chatty. Any suggestions to fix?

0 Karma

hortonew
Builder

Do you currently have

bindDNpassword =  

configured in authentication.conf (and left without a password), or is there no entry in the config at all?

0 Karma

pcarey
New Member

I'm seeing exactly the same thing and have forwarded logs to Splunk support. the problem with the log is that it spits out a very general message and doesn't give much to work with for troubleshooting.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Event Series: Splunk Observability Metrics Cost Optimization

Balancing Scale and Spend: Gaining Control Over High-Volume Metrics in Splunk Observability Cloud As ...

Kick the Tires Before You Commit: A Hands-On Tour of the Splunk Observability Cloud ...

Evaluating an enterprise observability platform usually goes like this: fill out a form, get a free trial with ...

Deep insights, no barriers: Splunk Observability Cloud Free Edition

As software delivery cycles continue to accelerate, observability shouldn’t be a luxury — it should be a ...