AD Authentication issues - LDAP Bind Failure

ISSUE

Unable to login to UI using AD creds after successfully setting up under Users. When looking in the /var/log/httpd/ssl_error.log the following error was seen:

PHP Warning: ldap_bind(): Unable to bind to server: Strong(er) authentication required in

RESOLUTION

LDAP/Active Directory authentication issue
The following Group Policy settings needed to be modified to match the working AD DCs for logons to work with an AD account and the Unitrends appliance.

Local Computer Policy
       └ - - Computer Configuration
                            └ - - - - Windows Settings
                                                 └ - - - - Security Settings
                                                                      └ - - - - Local Policies
                                                                                           └ - - - - Security Options
                                                                             Set to 'None'  >>>   └ - - - - Network security: LDAP client signing requirements

Default Domain Controller Policy
              └ - - Computer Configuration
                             └ - - - - Windows Settings
                                                 └ - - - - Security Settings
                                                                      └ - - - - Local Policies
                                                                                         └ - - - - Security Options
                                                                            Set to 'None'  >>>   └ - - - - Domain Controller: LDAP server signing requirements

TASKS

Please see Microsoft Document 935834 "How to enable LDAP signing in Windows Server
https://support.microsoft.com/en-us/help/935834/how-to-enable-ldap-signing-in-windows-server

Network security: LDAP client signing requirements

Network security: LDAP client signing requirements

Domain Controller: LDAP server signing requirements
User-added image
Was this article helpful?
0 out of 0 found this helpful
Have more questions? Contact us