RecoverPoint. Реализации LDAP с использованием конфигурации аутентификации Kerberos и/или входа в RecoverPoint завершаются сбоем

Summary: RecoverPoint. Реализации LDAP с использованием конфигурации аутентификации Kerberos и/или входа в RecoverPoint завершаются сбоем.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

Использование аутентификации Kerberos для LDAP в RecoverPoint.
 

Реализации LDAP с использованием конфигурации аутентификации Kerberos и/или входа в RecoverPoint завершаются сбоем.

В CLI test_ldap возвращает:

Error: Unable to connect to primary LDAP server. 
Error: Unable to connect to secondary LDAP server.


В журналах управления: 

2020/07/15 12:03:16.736 - #2 - 5963/4656 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 12:03:16.745 - #2 - 5987/4656 - LDAP: In testLdapConnectivity. 
2020/07/15 12:03:17.011 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #1 - 5987/4656 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Failed to set the client key file name. CST exception: SystemException 
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings returned
2020/07/15 12:03:17.212 - #2 - 5963/4656 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.
2020/07/15 11:20:20.192 - #2 - 13138/12853 - Mgmt::addBindPwdToLdapSettings: start
2020/07/15 11:20:20.200 - #2 - 13138/12853 - MgmtAction: testLdapSettings: calling testLdapConnectivity, currentUser=(userName=security-admin) 
2020/07/15 11:20:20.200 - #2 - 13182/12853 - LDAP: In testLdapConnectivity. 
2020/07/15 11:20:20.413 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Primary-LDAP. Search for user name failed. CST exception: SystemException
2020/07/15 11:20:20.606 - #1 - 13182/12853 - LDAP: cstUpdateValidateOptions: Failed to update or validate Secondary-LDAP. Search for user name failed. CST exception: SystemException 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings returned 
2020/07/15 11:20:20.606 - #2 - 13138/12853 - MgmtAction: testLdapSettings() returning: Error: Unable to connect to primary LDAP server. Error: Unable to connect to secondary LDAP server.

 

Cause

RecoverPoint использует пакет под названием Common Security Toolkit (CST) для обработки аутентификации LDAP. CST не поддерживает аутентификацию Kerberos ни в какой версии.

Resolution

Временное решение.

Реализуйте протокол LDAP over SSL (LDAPS) для дополнительной безопасности.

Продукт работает должным образом, так как проверка подлинности Kerberos не поддерживается.

 

 

Affected Products

RecoverPoint

Products

RecoverPoint, RecoverPoint CL, RecoverPoint EX, RecoverPoint for Virtual Machines, RecoverPoint SE
Article Properties
Article Number: 000082350
Article Type: Solution
Last Modified: 08 Oct 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.