LDAP Authentication Issues

[Former Member]

Currently we had integrated GRC10 (SP13) with LDAP (AD) as per the SAP Note 1584110 - GRC Access Controls 10 - How to configure LDAP connectors. We are able to establist connection and pull users using the report RSLDAPSYNC_USER.

When the end users are trying to login using browser using the LDAP Password they are getting error message.

Cannot unbind LDAP system 

Cannot perform read operation on LDAP system 

Cannot connect to LDAP system

Kindly let me know if I have missed any steps.

[pawan_amarnani]

Hi,

I am facing the same issue.

at end user log on screen , it given the error "can not connect to LDAP system" when I am giving correct ldap user and password.

Please help.

Regards,

Pavan

[mamoonr]

[former_member193066]

SP13 ..

do 1 things..i had issue duing my go live..

in SICF you have maintained guest user.

give in full access.

this will be fine.

Regards,

Prasant

[mamoonr]

Thank you Prasant....It worked.SAP_ALL was for guest user in DEV and QA but we were hesitant to give in PROD. It does solve the issue by giving SAP_ALL.

But SAP_ALL should not be recommended in PROD environment .DO you have any idea of specific authorization for this access?

Thanks,

Mamoon

[Colleen]

have a look at S_LDAP, S_ICF and S_RFC authorisations

possibly run trace or check ST22 logs for error to get specific value.

[mamoonr]

Thanks Cooleen... Will check and update all.

[former_member193066]

yes, RFC auth and LDAP auth fixes it.

forgot note number its there in 1 of old notes .

Regards,

Prasant

[Former Member]

Still facing the issue. Maintained the guest user with SAP_ALL, SAP_NEW.

`Kindly confirm if i need to enter the IP address of LDAP in host file.

[Colleen]

Hi Vinayak

Can you please compare your transaction LDAP configuration between DEV and PRD to see if there is a slight difference

Also, there is a program that should run to keep the connection open (ask your Basis person) - I can't remember what my counterpart did but they executed a program to keep the LDAP connection open

I noticed there's KB article to checking LDAP binding - it might help you to troubleshoot the issue

1978357 - User Search from LDAP: Checking if LDAP Authentication and Binding is successful

Regards

Colleen

[former_member193066]

check your base entry.

download ldap .exe tool.

then connecto to LDAP system using it.. then bind it

view tree , and check for user location ..

you will get complete base entry.

you should be fine then

[mamoonr]

Hi Vinayak,

Please let me know if you are able to resolve the issue.As my production system is also throwing same error.

Thanks,

Mamoon

[mamoonr]

Hi Vinayak,

Please run connection test for LDAP connectors in Sm59 .It may be connection is lost .

Thanks,

Mamoon

[Former Member]

Hi Mamoom,

We have already established connection and SM59 is successful still the users are not able to login

Regards

Vinayak

[former_member184114]

Vinayaka,

May I know if you are able to search LDAP users from LDAP tcode?

Please follow this note#1604946 - End User Authentication failing for LDAP System

Regards,

Faisal

[Colleen]

Hi Vinayak

Have you gone to transaction LDAP and tried to complete a search?

Regards

Colleen

[mamoonr]

Hi Colleen,

May be its silly, but please let me know how to complete a search in LDAP transaction?

I have the same error in Production but Dev and QA are working fine.

Thanks,

Mamoon