LDAP queries not working

KM1895 — Wed, 21 Apr 2021 10:58:15 GMT

hi,

I have encountered a somewhat strange error regarding ldap queries.

After replacing hardware on two clusters, to new appliances and lifting them from R77.30 to R80.40,

we see now that ldap is not working anymore.

This has two major impacts:

1. logs are not populated

2. remote access is not working as intended.

For remote access, we see that users are authenticated with generic* user. Tcpdump show us that ldap search request is sent, but it completely disregards the branches defined in ldap account unit, and only searches the last two DC=xxxx,DC=xxxx parts. Therefore, we see the ldap server send an error code 10, which means that the user is not found.

The customer still has a remote access cluster on R77.30, where it works just fine, and we also tested on a backup site running R80.20. There we see succesful ldap authentication when logging on with vpn client.

There has been no other changes done here, so im struggling to see why this would suddenly stop to work, just because we switched hardware and software version.

I have a tac case going, but its progressing slowly, so was wondering if anyone in the community here has encountered anything similar,

Re: LDAP queries not working

PhoneBoy — Fri, 23 Apr 2021 17:42:39 GMT

Try using the ldapsearch command manually to see what happens as a troubleshooting step.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk55040

topic LDAP queries not working in General Topics

LDAP queries not working

Re: LDAP queries not working