public inbox for [email protected]  

help / color / mirror / Atom feed

From: =?iso-8859-2?Q?Domen_=A9etar?= <[email protected]>
To: [email protected] <[email protected]>
Subject: LDAP authentication problem
Date: Fri, 18 Oct 2024 11:29:22 +0000
Message-ID: <[email protected]> (raw)

Hi Admins,

I have faced very strange problem in one of my postgresql servers. We use LDAP authentication.

Several colegues can't login with their AD accounts into the server. I found error messages in postgresql log:

2024-10-18 07:23:46 CEST [3203974]: [2-1] ...  could not search LDAP for filter "(samaccountname=johndoe)" on server "adc1 adc2": Operations error
2024-10-18 07:23:46 CEST [3203974]: [3-1] ... DETAIL:  LDAP diagnostics: 000004DC: LdapErr: DSID-0C090C78, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, v4f7c
2024-10-18 07:23:46 CEST [3203974]: [4-1] ... FATAL:  LDAP authentication failed for user "johndoe"

I can login with my AD account.
Ldapsearch works from the host.
My colegues can login with the same LDAP account to postgresql on antoher hosts.

I'm out of ideas what could be wrong.

Best regards!
[izum]

Domen Šetar
Computer Systems Support
IZUM - Institute of Information Science | Prešernova ulica 17 | 2000 Maribor | Slovenia
T: +386 2 25 20 339 | M: +386 41 676 342 | www.izum.si<http://www.izum.si/; | [email protected]<mailto:[email protected]>





Attachments:

  [image/jpeg] image002.jpg (1.3K, 3-image002.jpg)
  download | view image

view thread (2+ messages)  latest in thread

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected]
  Subject: Re: LDAP authentication problem
  In-Reply-To: <[email protected]>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox