NetWorker: AD/LDAP Integration Fails with LDAP Error 49 Data 52e (invalid credentials) HTTP 400

Samenvatting: Lightweight Directory Access Protocol (LDAP) integration with NetWorker fails with LDAP error code 49 Data 52e (invalid credentials); however, the bind account credentials are correct.

Dit artikel is van toepassing op Dit artikel is niet van toepassing op Dit artikel is niet gebonden aan een specifiek product. Niet alle productversies worden in dit artikel vermeld.

Symptomen

  • You are attempting to integrate AD/LDAP external authentication with NetWorker.
  • The configuration is failing with LDAP error code 49 data 52e (Invalid credentials).
  • The User DN and User Password fields are correct.
  • The following error is shown in the NMC and in the NMC server gstd.raw file:
Windows: [Install Drive]:\Program Files\EMC NetWorker\Management\GST\logs\gstd.raw
Linux: /opt/lgtonmc/logs/gstd.raw
Unable to modify external authentication provider in authentication service [ ErrorMsg: Failed to verify configuration CONFIGURATION_NAME: An authentication error occurred while accessing the naming or directory service: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09042A, comment: AcceptSecurityContext error, data 52e, v3839], HTTPErrorCode: 400 ]

NetWorker: How to use nsr_render_log

LDAP Error code 49 data 52e
NOTE: The Provider Server Name must be a resolvable hostname/IP address of your AD/LDAP server. 

Oorzaak

The "Domain" field does not match the full base DN of the domain. Meaning, it is missing Domain Component (DC) values.

In the example shown, the provider server name was SERVER.BACKUPS.DOMAIN.COM, but only DOMAIN.COM was entered in the Domain Name field; whereas, it should have been BACKUPS.DOMAIN.COM,

Oplossing

Enter the base Distinguished Name (DN) or Domain Component (DC) values for your domain in the Domain Name field. For example:
 
Correct Domain

A Request for Enhancement (RFE) has been opened with the request to add domain "alias" configuration options to the new external authentication method. To track this feature, contact your Dell sales or account representative regarding RFE NW-I-1063.

Extra informatie

Getroffen producten

NetWorker

Producten

NetWorker Management Console
Artikeleigenschappen
Artikelnummer: 000163111
Artikeltype: Solution
Laatst aangepast: 04 jun. 2025
Versie:  4
Vind antwoorden op uw vragen via andere Dell gebruikers
Support Services
Controleer of uw apparaat wordt gedekt door Support Services.