NetWorker: AD/LDAP Integration Fails with LDAP Error 49 Data 52e (invalid credentials) HTTP 400

Riepilogo: Lightweight Directory Access Protocol (LDAP) integration with NetWorker fails with LDAP error code 49 Data 52e (invalid credentials); however, the bind account credentials are correct.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.

Sintomi

  • You are attempting to integrate AD/LDAP external authentication with NetWorker.
  • The configuration is failing with LDAP error code 49 data 52e (Invalid credentials).
  • The User DN and User Password fields are correct.
  • The following error is shown in the NMC and in the NMC server gstd.raw file:
Windows: [Install Drive]:\Program Files\EMC NetWorker\Management\GST\logs\gstd.raw
Linux: /opt/lgtonmc/logs/gstd.raw
Unable to modify external authentication provider in authentication service [ ErrorMsg: Failed to verify configuration CONFIGURATION_NAME: An authentication error occurred while accessing the naming or directory service: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839], HTTPErrorCode: 400 ]

NetWorker: How to use nsr_render_log

LDAP Error code 49 data 52e
NOTE: The Provider Server Name must be a resolvable hostname/IP address of your AD/LDAP server. 

Causa

The "Domain" field does not match the full base DN of the domain. Meaning, it is missing Domain Component (DC) values.

In the example shown, the provider server name was SERVER.BACKUPS.DOMAIN.COM, but only DOMAIN.COM was entered in the Domain Name field; whereas, it should have been BACKUPS.DOMAIN.COM,

Risoluzione

Enter the base Distinguished Name (DN) or Domain Component (DC) values for your domain in the Domain Name field. For example:
 
Correct Domain

A Request for Enhancement (RFE) has been opened with the request to add domain "alias" configuration options to the new external authentication method. To track this feature, contact your Dell sales or account representative regarding RFE NW-I-1063.

Informazioni aggiuntive

Prodotti interessati

NetWorker

Prodotti

NetWorker Management Console
Proprietà dell'articolo
Numero articolo: 000163111
Tipo di articolo: Solution
Ultima modifica: 04 giu 2025
Versione:  4
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.