Security

Error binding to LDAP

sysvault
New Member

ERROR ScopedLDAPConnection - strategy="ldap-server-name" Error binding to LDAP. reason="Invalid credentials"

The message above comes up frequently in the splunkd.log.
Authentication is currently set to anonymously bind.
LDAP users are successfully able to login to splunk.

I've tried creating an account for splunk to use for Bind DN to see if that would resolve the issue but those entries kept coming up.
At the moment LDAP auth works with anonymous bind but the logs are just chatty. Any suggestions to fix?

0 Karma

hortonew
Builder

Do you currently have

bindDNpassword =  

configured in authentication.conf (and left without a password), or is there no entry in the config at all?

0 Karma

pcarey
New Member

I'm seeing exactly the same thing and have forwarded logs to Splunk support. the problem with the log is that it spits out a very general message and doesn't give much to work with for troubleshooting.

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...