Security

Error binding to LDAP

sysvault
New Member

ERROR ScopedLDAPConnection - strategy="ldap-server-name" Error binding to LDAP. reason="Invalid credentials"

The message above comes up frequently in the splunkd.log.
Authentication is currently set to anonymously bind.
LDAP users are successfully able to login to splunk.

I've tried creating an account for splunk to use for Bind DN to see if that would resolve the issue but those entries kept coming up.
At the moment LDAP auth works with anonymous bind but the logs are just chatty. Any suggestions to fix?

0 Karma

hortonew
Builder

Do you currently have

bindDNpassword =  

configured in authentication.conf (and left without a password), or is there no entry in the config at all?

0 Karma

pcarey
New Member

I'm seeing exactly the same thing and have forwarded logs to Splunk support. the problem with the log is that it spits out a very general message and doesn't give much to work with for troubleshooting.

0 Karma
Get Updates on the Splunk Community!

New Case Study: How LSU’s Student-Powered SOCs and Splunk Are Shaping the Future of ...

Louisiana State University (LSU) is shaping the next generation of cybersecurity professionals through its ...

Splunk and Fraud

Join us on November 13 at 11 am PT / 2 pm ET!Join us for an insightful webinar where we delve into the ...

Build Your First SPL2 App!

Watch the recording now!.Do you want to SPL™, too? SPL2, Splunk's next-generation data search and preparation ...