topic Re: LDAP Server as FQDN in LDAP Server Profile in General Topics

LDAP Server as FQDN in LDAP Server Profile

Farzana — Mon, 24 Oct 2016 04:42:12 GMT

Hello,

When FQDN (port 636) is used in the Address field, user cannot connect. Gets error: LDAP auth server is down!

What settings need to be applied so that LDAP server profile can use FQDN besides IP address?

Thanks in advance.

Re: LDAP Server as FQDN in LDAP Server Profile

kiwi — Mon, 24 Oct 2016 07:23:29 GMT

Hi,

Have you confirmed that DNS resolution is working fine ?

You may want to check for DNS resolution errors in the logs.

Cheers,

-Kim.

Re: LDAP Server as FQDN in LDAP Server Profile

Farzana — Tue, 25 Oct 2016 03:37:32 GMT

Hello Kim,

Thank you for providing your time on this query.

Using internal name servers...not public DNS. Tried both LDAP (389) and LDAPS (636) but when FQDN is used in the LDAP server profile getting error: LDAP auth server down!!!

Works fine when IP address is used. Any bug that you are aware of?

Best regards,

Farzana

Re: LDAP Server as FQDN in LDAP Server Profile

kiwi — Wed, 26 Oct 2016 08:05:11 GMT

Hi,

Even using an internal DNS server your firewall will have to be able to resolve it correctly.

Every time you perform LDAP server communication (for example manual or automatic user group refresh, authentication LDAP query or similar LDAP actions) our system will perform DNS lookup and resolve IP address for configured FQDN for LDAP server in LDAP server profile.

From the CLI try 'ping host <FQDN hostname>' to confirm if your firewall resolves it correctly.

-Kim.

Re: LDAP Server as FQDN in LDAP Server Profile

Farzana — Tue, 01 Nov 2016 22:43:17 GMT

Hi,

Just wanted to close the loop by mentioning that issue is resolved by restarting the authd process.