Unsolved

This post is more than 5 years old

15 Posts

51366

December 12th, 2014 02:00

Dell VRTC CMC User Directory Services

Hi

I want to get the CMC the use my Active Directory to Authenticate users. I have set it up with Microsoft Standard Schema but don't want to use Certificate validation so I have it unchecked but when I do  a test I get the following error. Any ideas? why it is failing?

[check]: (system) Verify needed system resources: PASSED
[check]: (setup) Validate AD configuration: PASSED
INFO - (setup) Using standard schema
INFO - (setup) SSL certificate check disabled
[check]: (setup) Verify SSL certificate files exist: FAILED
ERROR - (setup) SSL CA Certificate file missing
TEST FAILED

 

 

Moderator

 • 

9.7K Posts

December 15th, 2014 12:00

Zoom_Cool,

The issue is that the test you are running is designed to test the SSL Certificate existence. Since you are disabling it, it is being flagged by the test for not having the required files associated.. May I ask why you are not wanting to use SSL verification? 

15 Posts

January 12th, 2015 06:00

Hi Chris

Sorry for not getting back on this. Why do I need to use SSL if I do use SSL do I need to generate a cert and upload.

15 Posts

January 12th, 2015 08:00

Hi Chris

Thanks for the quick response so I have been given the Root CA from another administrator here on our network and loaded it successfully but now I get this error message when I do the test.

I have setup the AD groups in the Standard Schema Role Groups and the user is present in the group.

Is this a issue with the cert I was provided.

[check]: (system) Verify needed system resources: PASSED
[check]: (setup) Validate AD configuration: PASSED
INFO - (setup) Using standard schema
[check]: (setup) Verify SSL certificate files exist: PASSED
[check]: (dns) Acquire LDAP and GC SRV records: PASSED
[check]: (authen) Acquire user privileges: FAILED
ERROR - (authen) AD INVALID CREDENTIAL 0x00006007
RESULT - Unable to acquire user privileges
TEST FAILED

Moderator

 • 

9.7K Posts

January 12th, 2015 08:00

I don't believe you have to, I was commenting on that due to it is required for the test you are performing. If you do use SSL you will need to upload the cert.

Moderator

 • 

9.7K Posts

January 12th, 2015 11:00

Just to clarify, do you have local admin rights with Full or Modify permissions?

15 Posts

January 13th, 2015 01:00

Hi Chris

Yes I do have local admin rights.

Moderator

 • 

9.7K Posts

January 13th, 2015 04:00

Sorry, just had to verify. 

The log indicates an Active Directory (AD) AcceptSecurityContext error, which is returned when the username is valid but the combination of password and user credential is invalid. This is the AD equivalent of LDAP error code 49. Would you be able to verify this?

Let me know.

15 Posts

January 13th, 2015 05:00

Hi Chris

Figured out when I unchecked the Certificate Validation Enabled it worked thanks for all you help.

  

0 events found

No Events found!

Top