End User Logon cannot verify LDAP account/password

[Former Member]

Hi GRC experts

Here I connected to LDAP server successfully and can query AD account from AD server. But  the end user verification via LDAP server does not work. It pops up an error message and says that "Invalid user credentials". Can someone please tell me what I need to check further? Thanks a lot

Best regards

James

[former_member193066 · Accepted solution]

Go to Data source disable authentication try without password.

Check if binding is successful.

They enable and try with your password.

Regards,

Prasant

[Former Member · Accepted solution]

Hi Prasant

Yes, I tested to disable verification without password and it can work, the LDAP binding is sucessful. But it cannot verify account with password

Best regards

James

[former_member193066 · Accepted solution]

Check your Base entry and there is note for LDAP binding how to test.

1978357 - User Search from LDAP: Checking if LDAP Authentication and Binding is successful

Prasant

[Former Member · Accepted solution]

Hi Prasant and Abhi

Thanks for your help, now the LDAP verification can work.

I traced the code and found that the root cause is because of the LDAP Group parameter setting. We must configure the parameter "LDAP_END_USER_AUTH_SUFFIX" and set the value empty.

If you don't configure "LDAP_END_USER_AUTH_SUFFIX", the program will automatically bind user with "@+LDAP IP" and use the new user ID to try to login LDAP server.

Best regards

James

[Former Member · Accepted solution]

Additional remarks, the value of LDAP_END_USER_AUTH_SUFFIX should be "@+Domain Name"

[Former Member]

Hi James,

Go to transaction code LDAP -> LDAP connectors.

Make connector is active under status.

Regards,

Abhi