RecoverPoint: Le implementazioni LDAP che utilizzano la configurazione dell'autenticazione Kerberos e/o gli accessi in RecoverPoint hanno esito negativo

Summary: RecoverPoint: Le implementazioni LDAP che utilizzano la configurazione dell'autenticazione Kerberos e/o gli accessi in RecoverPoint hanno esito negativo.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Utilizzo dell'autenticazione Kerberos per LDAP su RecoverPoint.
 

Le implementazioni LDAP che utilizzano la configurazione dell'autenticazione Kerberos e/o gli accessi in RecoverPoint hanno esito negativo.

Nella CLI test_ldap restituisce:

Error: Unable to connect to primary LDAP server. 
Error: Unable to connect to secondary LDAP server.


Nei registri di gestione: 

2020/07/15 12:03:16.736 - #2 - 5963/4656 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 12:03:16.745 - #2 - 5987/4656 - LDAP: In testLdapConnectivity. 
2020/07/15 12:03:17.011 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings returned
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.
2020/07/15 11:20:20.192 - #2 - 13138/12853 - Mgmt::addBindPwdToLdapSettings: start
2020/07/15 11:20:20.200 - #2 - 13138/12853 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 11:20:20.200 - #2 - 13182/12853 - LDAP: In testLdapConnectivity. 
2020/07/15 11:20:20.413 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Search for user name failed. CST exception: SystemException
2020/07/15 11:20:20.606 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Search for user name failed. CST exception: SystemException 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings returned 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.

 

Cause

RecoverPoint utilizza un pacchetto denominato Common Security Toolkit (CST) per gestire l'autenticazione LDAP. CST non supporta l'autenticazione Kerberos in nessuna versione.

Resolution

Soluzione alternativa:

Implementare LDAP over SSL (LDAPS) per una maggiore sicurezza.

Il prodotto funziona come previsto in quanto l'autenticazione Kerberos non è supportata.

 

 

Affected Products

RecoverPoint

Products

RecoverPoint, RecoverPoint CL, RecoverPoint EX, RecoverPoint for Virtual Machines, RecoverPoint SE
Article Properties
Article Number: 000082350
Article Type: Solution
Last Modified: 08 Oct 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.