LDAP authentication with AD always returns: ERROR ScopedLDAPConnection - Search for DN 'dc=xyz,dc=net' gave error: Operations error

[hughkelley]

My authentication and role mapping seem to be working fine, but I see many of these errors in the splunkd log (one for each web login):

ERROR ScopedLDAPConnection - Search for DN 'dc=xyz,dc=net' gave error: Operations error

Where do they come from?

[I-Man]

This happened in our environment when we switched from Windows to Linux. The AD config is exactly the same and only the linux machines have the error message...

[ithangasamy_spl]

this is likely due to a unfollowed referrals in your AD

[mthierbel]

Can you elaborate on this?