RecoverPoint : Les implémentations LDAP utilisant la configuration de l’authentification Kerberos et/ou les connexions dans RecoverPoint échouent

Summary: RecoverPoint : Les implémentations LDAP utilisant la configuration de l’authentification Kerberos et/ou les connexions dans RecoverPoint échouent.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Utilisation de l’authentification Kerberos pour LDAP sur RecoverPoint.
 

Les implémentations LDAP utilisant la configuration de l’authentification Kerberos et/ou les connexions dans RecoverPoint échouent.

Dans la test_ldap de la CLI, les retours :

Error: Unable to connect to primary LDAP server. 
Error: Unable to connect to secondary LDAP server.


Dans les logs de gestion : 

2020/07/15 12:03:16.736 - #2 - 5963/4656 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 12:03:16.745 - #2 - 5987/4656 - LDAP: In testLdapConnectivity. 
2020/07/15 12:03:17.011 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings returned
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.
2020/07/15 11:20:20.192 - #2 - 13138/12853 - Mgmt::addBindPwdToLdapSettings: start
2020/07/15 11:20:20.200 - #2 - 13138/12853 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 11:20:20.200 - #2 - 13182/12853 - LDAP: In testLdapConnectivity. 
2020/07/15 11:20:20.413 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Search for user name failed. CST exception: SystemException
2020/07/15 11:20:20.606 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Search for user name failed. CST exception: SystemException 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings returned 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.

 

Cause

RecoverPoint utilise un package appelé Common Security Toolkit (CST) pour gérer l’authentification LDAP. CST ne prend pas en charge l’authentification Kerberos, quelle que soit la version.

Resolution

Solution de contournement :

Implémentez LDAP sur SSL (LDAPS) pour plus de sécurité.

Le produit fonctionne comme prévu, car l’authentification Kerberos n’est pas prise en charge.

 

 

Affected Products

RecoverPoint

Products

RecoverPoint, RecoverPoint CL, RecoverPoint EX, RecoverPoint for Virtual Machines, RecoverPoint SE
Article Properties
Article Number: 000082350
Article Type: Solution
Last Modified: 08 Oct 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.