active directory - Randomly getting LDAP Error 49, data 52e on random users? -
The architecture is as follows:
There were 7.0 servers on 12 servers of 3 LPARs, they have BPM floating And the device on this case is the business space.
For ID we have AD DS (2 branches), a DC = Principal Dyko, which is the global catalog and the second one DC = Principal dot com. Office
DC = Principal Dot at Port 3268 (Global Catalog)
We have the following error for less than 1% users:
They Try to login, but they can not receive the message and "Enter your username and password" and we get the following message in the log
0000004c LTPAServerObj E SECJ036 9 E: Authentication failed while using LTPA. The exception is CWWIM4529E 'principal_name' key verification for password verification failed 'e60083' Root cause: 'javax.naming.AuthenticationException: [LDAP: Error code 49 - 80090308: LDAPR: DSID-0C903A9, comment: Accept security quintax error, data 52A, V1DB1]; Hull object: 'com.sun.jndi.ldap.LdapCtx@519d519d' ' A user was able to login in the morning and got the error described before noon.
A user may be unable to logon from a computer and be able to do it on another (on the same ADDS branch)
On another change control, Not related to this problem, the problem to restart the WAS server stopped there and is now resumed.
Any indicator will be very useful to check in advance thanks in advance
I'm sure It is not that it will help, but it can get you started.
We saw this error on a DC which does not allow anonymous bonding. We had to provide the Admin username dd password to bind to the LDAP server, then pass the credentials for the user to authenticate in the search request. We also know that you have to fill the administrator account with the domain abbreviation. To wit. ShortName \ administrator
Comments
Post a Comment