Security

Error binding to LDAP

sysvault
New Member

ERROR ScopedLDAPConnection - strategy="ldap-server-name" Error binding to LDAP. reason="Invalid credentials"

The message above comes up frequently in the splunkd.log.
Authentication is currently set to anonymously bind.
LDAP users are successfully able to login to splunk.

I've tried creating an account for splunk to use for Bind DN to see if that would resolve the issue but those entries kept coming up.
At the moment LDAP auth works with anonymous bind but the logs are just chatty. Any suggestions to fix?

0 Karma

hortonew
Builder

Do you currently have

bindDNpassword =  

configured in authentication.conf (and left without a password), or is there no entry in the config at all?

0 Karma

pcarey
New Member

I'm seeing exactly the same thing and have forwarded logs to Splunk support. the problem with the log is that it spits out a very general message and doesn't give much to work with for troubleshooting.

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

A Four-Part Event Series: Full Stack Observability For the AI Era

As AI reshapes applications, infrastructure, and the way teams operate, the traditional boundaries of ...

SOC4Kafka - New Kafka Connector Powered by OpenTelemetry

The new SOC4Kafka connector, built on OpenTelemetry, enables the collection of Kafka messages and forwards ...

Event Series: Level up your SOC: Advancing with Splunk Enterprise Security

AI has fundamentally raised the stakes for security operations, and this three-part series is your guide to ...