LDAP & IDC all logs are "failed log in"

[Moudar]

Hi,

We have installed IDC and everything looks good. The problem is that all logs coming to SMS are "Failed log in", even if the log in was successful the log still "Failed log in"?!

All of the above logs were successful but logs in SMS say "failed log in"

Any ideas!

[the_rock]

Will check in lab, I think there is setting for this.

Best,

Andy

[the_rock]

Make sure option I pointed out is CHECKED.

Andy

 

[the_rock]

@Moudar Let us know if that does not work, I can do more lab tests.

Best,

Andy

[Moudar]

It is already configured as you said!

[the_rock]

It should be checked.

Andy

[Alex-]

You also need to configure the relevant LDAP Account Unit in Smart Console.

[the_rock]

Forgot that, 100% true.

Best,

Andy

[Moudar]

so if I have 4 different AD servers, everyone needs to have a LDAP account unit?

[the_rock]

I dont believe its required, but probably recommended.

Best,

Andy

[Alex-]

Account Units are per domain, not servers. You can create an AU with your domain and have 4 servers participate in it.

The firewalls need to be able to interrogate the AD servers to map the logon informations sent by the collectors.

[the_rock]

I know in the past it was always mentioned to have one server per AU, but I had seen people do multiple, works fine.

[Moudar]

As you can see our servers are in an LDAP AU, but still getting only "Failed log in" logs  and "log out" logs but no "log in" logs!

a rule to allow traffic looks like this:

[the_rock]

LDAP account unit seems fine to me. I would open TAC case to have all this double checked via remote session, might not be a bad idea.

Best,

Andy