RecoverPoint: RecoverPoint에서 Kerberos 인증 구성 및/또는 로그인을 사용하는 LDAP 구축이 실패함

Summary: RecoverPoint: RecoverPoint에서 Kerberos 인증 구성 및/또는 로그인을 사용하는 LDAP 구축이 실패합니다.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

RecoverPoint에서 LDAP에 Kerberos 인증 사용
 

RecoverPoint에서 Kerberos 인증 구성 및/또는 로그인을 사용하는 LDAP 구축이 실패합니다.

CLI에서 test_ldap는 다음을 반환합니다.

Error: Unable to connect to primary LDAP server. 
Error: Unable to connect to secondary LDAP server.


관리 로그에서: 

2020/07/15 12:03:16.736 - #2 - 5963/4656 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 12:03:16.745 - #2 - 5987/4656 - LDAP: In testLdapConnectivity. 
2020/07/15 12:03:17.011 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings returned
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.
2020/07/15 11:20:20.192 - #2 - 13138/12853 - Mgmt::addBindPwdToLdapSettings: start
2020/07/15 11:20:20.200 - #2 - 13138/12853 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 11:20:20.200 - #2 - 13182/12853 - LDAP: In testLdapConnectivity. 
2020/07/15 11:20:20.413 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Search for user name failed. CST exception: SystemException
2020/07/15 11:20:20.606 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Search for user name failed. CST exception: SystemException 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings returned 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.

 

Cause

RecoverPoint는 CST(Common Security Toolkit)라는 패키지를 사용하여 LDAP 인증을 처리합니다. CST는 어떤 버전에서도 Kerberos 인증을 지원하지 않습니다.

Resolution

해결 방법:

보안 강화를 위해 LDAPS(LDAP over SSL)를 구현합니다.

Kerberos 인증이 지원되지 않으므로 제품이 예상대로 작동하고 있습니다.

 

 

Affected Products

RecoverPoint

Products

RecoverPoint, RecoverPoint CL, RecoverPoint EX, RecoverPoint for Virtual Machines, RecoverPoint SE
Article Properties
Article Number: 000082350
Article Type: Solution
Last Modified: 08 Oct 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.