RecoverPoint: Las implementaciones de LDAP que utilizan la configuración de autenticación de Kerberos o los inicios de sesión en RecoverPoint fallan

Summary: RecoverPoint: Las implementaciones de LDAP que utilizan la configuración de autenticación de Kerberos o los inicios de sesión en RecoverPoint fallan.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Uso de autenticación Kerberos para LDAP en RecoverPoint.
 

Las implementaciones de LDAP que utilizan la configuración de autenticación de Kerberos o los inicios de sesión en RecoverPoint fallan.

En la test_ldap de la CLI, se muestra lo siguiente:

Error: Unable to connect to primary LDAP server. 
Error: Unable to connect to secondary LDAP server.


En los registros de administración: 

2020/07/15 12:03:16.736 - #2 - 5963/4656 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 12:03:16.745 - #2 - 5987/4656 - LDAP: In testLdapConnectivity. 
2020/07/15 12:03:17.011 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings returned
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.
2020/07/15 11:20:20.192 - #2 - 13138/12853 - Mgmt::addBindPwdToLdapSettings: start
2020/07/15 11:20:20.200 - #2 - 13138/12853 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 11:20:20.200 - #2 - 13182/12853 - LDAP: In testLdapConnectivity. 
2020/07/15 11:20:20.413 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Search for user name failed. CST exception: SystemException
2020/07/15 11:20:20.606 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Search for user name failed. CST exception: SystemException 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings returned 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.

 

Cause

RecoverPoint utiliza un paquete llamado Common Security Toolkit (CST) para manejar la autenticación LDAP. CST no es compatible con la autenticación de Kerberos en ninguna versión.

Resolution

Solución alternativa:

Implemente LDAP mediante SSL (LDAPS) para mayor seguridad.

El producto funciona según lo esperado, ya que no se admite la autenticación Kerberos.

 

 

Affected Products

RecoverPoint

Products

RecoverPoint, RecoverPoint CL, RecoverPoint EX, RecoverPoint for Virtual Machines, RecoverPoint SE
Article Properties
Article Number: 000082350
Article Type: Solution
Last Modified: 08 Oct 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.