topic Getting LDAP failed alert when LDAP is not configured on the ISE. in Network Access Control

Getting LDAP failed alert when LDAP is not configured on the ISE.

shubhampatki1994 — Mon, 01 Nov 2021 16:22:56 GMT

Hello All,

Our monitoring team came upon some alerts with error severity from the ISE server that the "LDAP connect to domain controller failed"

The thing is we do not have LDAP configured on ISE.

I checked on ISE and found the alerts in Reporting with the log id as 1634977810.

Below are the details of the error:

Event :- LDAP connect to domain controller failed

Error Details:- The password is incorrect for the given account

Failure Reason:- LDAP connect to domain controller failed

Resolution:- Check corresponding domain controller are available and error conditions.

But the thing is we don't have LDAP configured in the first place.

So why is the ISE creating such kind of error logs.

I don't believe there is anything to worry for.

Any information on this would be helpful.

TIA.

Re: Getting LDAP failed alert when LDAP is not configured on the ISE.

Mohammed al Baqari — Tue, 02 Nov 2021 02:36:38 GMT

Hi,

Try to run a packet capture for sometime to the LDAP server reported by ISE
to confirm that it attempts connection. If it does, then LDAP is
definitely configured. Now try to view LDAP server using different browser
(I had issues where LDAP servers weren't showing with IE/Chrome but it
doesn't with firefox)

***** please remember to rate useful posts

Re: Getting LDAP failed alert when LDAP is not configured on the ISE.

shubhampatki1994 — Tue, 02 Nov 2021 09:56:19 GMT

Hello Mohammed,

Thanks for the reply.

The LDAP was never configured on the ISE and we never intend to in the future.

If I navigate to Administration>External Identity Sources> LDAP, there is absolutely nothing. And that is the reason we are a bit amused as to why is ISE trying to authenticate to the LDAP server in the first place. Another thing is all the nodes are reporting this error in the cluster.

Any idea about this??

TIA

Re: Getting LDAP failed alert when LDAP is not configured on the ISE.

hslai — Wed, 03 Nov 2021 05:15:18 GMT

> Failure Reason:- LDAP connect to domain controller failed

Check the Active Directory join point(s).