XtremIO:LDAP 驗證失敗,因為ldap_bind:登入資料無效 (49)

Summary: LDAP 驗證失敗,因為ldap_bind:登入資料無效 (49)

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

嘗試登入 LDAP 時發生問題。

取得驗證失敗,且無法使用 LDAP 認證登入的錯誤。

檢查 XMS xms.log檔案,並尋找下列範例:

2016-09-01 11:14:11,382 - XmsLogger - DEBUG - executor::authenticate_external_user:8522 - checking external auth for username
2016-09-01 11:14:11,383 - XmsLogger - DEBUG - xioad2::authenticate_section:250 - TRYING ldap://ldapserver.net
2016-09-01 11:14:11,387 - XmsLogger - DEBUG - xioad2::authenticate_section:264 - ENVIRONMENT {'LDAPTLS_REQCERT': 'never'}
2016-09-01 11:14:11,387 - XmsLogger - DEBUG - xioad2::authenticate_section:266 - COMMAND 'ldapsearch' '-x' '-H' 'ldap://ldapserver.net' '-D' 'username@example.net' '-w' 'xxxxxxx' '-s' 'sub' '-
z' '10' '-l' '1500' '-b' 'OU=Infra,DC=mi,DC=example,DC=net' 'sAMAccountName=username' 'distinguishedName' 'dn'
2016-09-01 11:14:11,659 - XmsLogger - DEBUG - xioad2::authenticate_section:275 - # extended LDIF
#
# LDAPv3
# base <OU=Infra,DC=mi,DC=edeka,DC=net> with scope subtree
# filter: sAMAccountName=username
# requesting: distinguishedName dn
#
# search result
search: 2
result: 0 Success
# numResponses: 1
2016-09-01 11:14:11,974 - XmsLogger - ERROR - xmlrpc_server::authenticate_user_cb:77 - Unauthenticated user: username, IP: 10.10.81.21
2016-09-01 11:14:11,985 - XmsLogger - INFO - snmp::send_alert_trap:74 - Sending snmp alert trap: snmp version v2c alert type security object N/A
2016-09-01 11:14:11,985 - XmsLogger - INFO - snmp::send_alert_trap:77 - Trap target 10.68.10.20
2016-09-01 11:15:33,679 - XmsLogger - DEBUG - executor::authenticate_external_user:8522 - checking external auth for username@example.net
2016-09-01 11:15:33,680 - XmsLogger - DEBUG - xioad2::authenticate_section:250 - TRYING ldap://ldapbserver.net
2016-09-01 11:15:33,680 - XmsLogger - DEBUG - xioad2::authenticate_section:264 - ENVIRONMENT {'LDAPTLS_REQCERT': 'never'}
2016-09-01 11:15:33,680 - XmsLogger - DEBUG - xioad2::authenticate_section:266 - COMMAND 'ldapsearch' '-x' '-H' 'ldap://ldapbserver.net' '-D' 'username@example.net@example.net' '-w' 'xxxxxxx'
'-s' 'sub' '-z' '10' '-l' '1500' '-b' 'OU=Infra,DC=mi,DC=edeka,DC=net' 'sAMAccountName=username@example.net' 'distinguishedName' 'dn'
2016-09-01 11:15:34,011 - XmsLogger - DEBUG - xioad2::authenticate_section:275 -
2016-09-01 11:15:34,012 - XmsLogger - DEBUG - xioad2::authenticate_section:277 - ldap_bind: Invalid credentials (49)

 

Cause

綁定憑據不正確,因此 XMS 無法以綁定使用者身份進行角色或組查找。

 

Resolution

更正綁定憑據:繫結名稱或繫結密碼

針對 XMS 版本 6.XXX 上的陣列,KB 文章 29438 中顯示的特定特殊字元:XtremIO:使用 WebUI 設定繫結密碼時,不允許使用無效的 ASCII 字元用於基礎結構驗證

使用 XMCLI (XMS 的命令列) 設定綁定密碼時,不存在相同的特殊字元限制。但是,若使用上述任何特殊字元修改密碼,確實會使 XMS Recovery 在以後需要時無法運作,包括新 XMS 取代舊 XMS 的情況。強烈建議您在修改綁定密碼時使用 WebUI。只有在避免上述 KB 中提到的字元時,才應使用 XMCLI 方法來修改密碼。

 

Affected Products

XtremIO Family

Products

XtremIO Family, XtremIO HW Gen2 400GB, XtremIO HW Gen2 400GB Encrypt Capbl, XtremIO HW Gen2 400GB Encrypt Disable, XtremIO HW Gen2 400GB Exp Encrypt Disable, XtremIO HW Gen2 400GB Expandable, XtremIO HW Gen2 800GB Encrypt Capbl , XtremIO HW Gen2 800GB Encrypt Disable, XtremIO HW Gen3 40TB, XtremIO HW Gen3 40TB Encrypt Disable, XtremIO HW X2-R, XtremIO HW X2-R Encrypt Disable, XtremIO HW X2-S, XtremIO HW X2-S Encrypt Disable, XtremIO HW X2-T, XtremIO HW X2-T Encrypt Disable, XtremIO X1, XtremIO X2 ...
Article Properties
Article Number: 000050500
Article Type: Solution
Last Modified: 16 Dec 2025
Version:  6
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.