Security

Error binding to LDAP

sysvault
New Member

ERROR ScopedLDAPConnection - strategy="ldap-server-name" Error binding to LDAP. reason="Invalid credentials"

The message above comes up frequently in the splunkd.log.
Authentication is currently set to anonymously bind.
LDAP users are successfully able to login to splunk.

I've tried creating an account for splunk to use for Bind DN to see if that would resolve the issue but those entries kept coming up.
At the moment LDAP auth works with anonymous bind but the logs are just chatty. Any suggestions to fix?

0 Karma

hortonew
Builder

Do you currently have

bindDNpassword =  

configured in authentication.conf (and left without a password), or is there no entry in the config at all?

0 Karma

pcarey
New Member

I'm seeing exactly the same thing and have forwarded logs to Splunk support. the problem with the log is that it spits out a very general message and doesn't give much to work with for troubleshooting.

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...