10.0.10 code bug? LDAP auth server is up !!!

[jmurphy]

Since upgrading to 10.0.10, we've been getting system medium severity messages on our active firewalls that "LDAP auth server xxxx.xxx.xxx is up !!!".  We never receive a down message though.  We're not experiencing any issues with LDAP which makes me think this is a bug false alert.

Is anyone else experiencing this?

[EverMendez]

I have the same message with version 10.0.10 but i did can't fix .😪.

[BPry]

@EverMendez,

If you're still running 10.0.10 I would recommend upgrading to 10.0.11. I recall this issue requiring a temporary change to the filter for our log-settings, but I don't recall that exception needing to stay around after installing 10.0.11. I'd highly recommend that you upgrade from 10.0 however since that code branch has hit end-of-life and isn't getting any further development. 

[EverMendez]

Thanks for your recomendation. I will schedule the upgrade.

Regards,

[IMTechSupport]

Hello everyone! Has this issue been resolved? I am running 10.2.4-h2 but I experienced this error message, Please help

[rlarose]

Likewise, seeing this on my panorama 10.2.5

[TonyDeHart]

I had a brief conversation about this and was under the impression it would be fixed in 10.2.5 when we updated but I've also having the same log entries repeatedly. I don't have any news on when this will get fixed as I didn't have an official ticket open for it.

[rlarose]

Conversation w/ whom -- PAN support folks?  Did they provide any info on what is causing it?  Is it a totally bogus message or is something untoward going on?

I can confirm we are seeing the log messages in 10.2.5.

[TonyDeHart]

It was with PAN support. I was told it can be ignored and is nothing to worry about. We get logs forwarded to us via email and I had to exclude this because of its frequency.

[rlarose]

It's showing up now as a known issue for 10.2.5:

https://docs.paloaltonetworks.com/pan-os/10-2/pan-os-release-notes/pan-os-10-2-5-known-and-addressed...

PAN-222418 The firewall intermittently records a reconnection message to the authentication server as an error, even if no disconnection occurs.

[CANMAO]

I also have this problem on a 10.2.8-h3 440.

Support said that 10.2.8 resolved this issue.

For now we are filtering email alerts

[rlarose]

It's listed in the 10.2.8 release notes as fixed.  Have you let them know?

[Lance]

Good Day,

We are running 11.1.2-h3 and we no longer getting this error message