topic Re: Organization Scanner Failed in Endpoint

Organization Scanner Failed

gm446 — Sun, 04 Jun 2023 11:36:09 GMT

Hi All,

i am facing an issue with synchronization of endpoint server to active directory via LDAP. the issue is described on sk161112.

https://support.checkpoint.com/results/sk/sk161112

I wonder if anyone encountered this problem and was able to solve it, according to Checkpoint it is a setting on a Microsoft server but I did not find any relevant information on Microsoft documentation.

would love any help with this.

Best Regards,
Yossi.

Re: Organization Scanner Failed

the_rock — Sun, 04 Jun 2023 15:26:12 GMT

Hey Yossi,

While I never had this issue myself and that SK sadly does not point to any other MS link, I did some research and found below. Not sure if its relevent though : - (

Andy

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/enable-ldap-signing-in-windows-server

Re: Organization Scanner Failed

gm446 — Mon, 05 Jun 2023 10:52:40 GMT

Hi Andy,

thank you, it's actually direct me to this and i think this is the configuration:
https://support.savance.com/Knowledgebase/Article/View/421/29/strong-authentication-is-required-for-this-operation

but now i got a request to go in other direction with this and configure LDAPS also on the endpoint server, but when i follow sk84620 i get an "Permission Deny" error while i am trying to add the certificate:

https://support.checkpoint.com/results/sk/sk84620

Re: Organization Scanner Failed

the_rock — Mon, 05 Jun 2023 11:05:04 GMT

For that, maybe better to confirm with TAC

https://help.checkpoint.com

Andy

Re: Organization Scanner Failed

gm446 — Mon, 05 Jun 2023 11:15:23 GMT

i actually succeed with this commands:

cd $CPDIR/jre_64
./bin/keytool -import -keystore ./lib/security/cacert -file <cert file name> -alias <alias>

Thank you very much