Unsolved
This post is more than 5 years old
15 Posts
0
51366
December 12th, 2014 02:00
Dell VRTC CMC User Directory Services
Hi
I want to get the CMC the use my Active Directory to Authenticate users. I have set it up with Microsoft Standard Schema but don't want to use Certificate validation so I have it unchecked but when I do a test I get the following error. Any ideas? why it is failing?
[check]: (system) Verify needed system resources: PASSED
[check]: (setup) Validate AD configuration: PASSED
INFO - (setup) Using standard schema
INFO - (setup) SSL certificate check disabled
[check]: (setup) Verify SSL certificate files exist: FAILED
ERROR - (setup) SSL CA Certificate file missing
TEST FAILED
0 events found
No Events found!


DELL-Chris H
Moderator
•
9.7K Posts
0
December 15th, 2014 12:00
Zoom_Cool,
The issue is that the test you are running is designed to test the SSL Certificate existence. Since you are disabling it, it is being flagged by the test for not having the required files associated.. May I ask why you are not wanting to use SSL verification?
Zoom_Cool
15 Posts
0
January 12th, 2015 06:00
Hi Chris
Sorry for not getting back on this. Why do I need to use SSL if I do use SSL do I need to generate a cert and upload.
Zoom_Cool
15 Posts
0
January 12th, 2015 08:00
Hi Chris
Thanks for the quick response so I have been given the Root CA from another administrator here on our network and loaded it successfully but now I get this error message when I do the test.
I have setup the AD groups in the Standard Schema Role Groups and the user is present in the group.
Is this a issue with the cert I was provided.
[check]: (system) Verify needed system resources: PASSED
[check]: (setup) Validate AD configuration: PASSED
INFO - (setup) Using standard schema
[check]: (setup) Verify SSL certificate files exist: PASSED
[check]: (dns) Acquire LDAP and GC SRV records: PASSED
[check]: (authen) Acquire user privileges: FAILED
ERROR - (authen) AD INVALID CREDENTIAL 0x00006007
RESULT - Unable to acquire user privileges
TEST FAILED
DELL-Chris H
Moderator
•
9.7K Posts
0
January 12th, 2015 08:00
I don't believe you have to, I was commenting on that due to it is required for the test you are performing. If you do use SSL you will need to upload the cert.
DELL-Chris H
Moderator
•
9.7K Posts
0
January 12th, 2015 11:00
Just to clarify, do you have local admin rights with Full or Modify permissions?
Zoom_Cool
15 Posts
0
January 13th, 2015 01:00
Hi Chris
Yes I do have local admin rights.
DELL-Chris H
Moderator
•
9.7K Posts
0
January 13th, 2015 04:00
Sorry, just had to verify.
The log indicates an Active Directory (AD) AcceptSecurityContext error, which is returned when the username is valid but the combination of password and user credential is invalid. This is the AD equivalent of LDAP error code 49. Would you be able to verify this?
Let me know.
Zoom_Cool
15 Posts
0
January 13th, 2015 05:00
Hi Chris
Figured out when I unchecked the Certificate Validation Enabled it worked thanks for all you help.