Getting LDAP failed alert when LDAP is not configured on the ISE.

[shubhampatki1994]

Hello All,

Our monitoring team came upon some alerts with error severity from the ISE server that the "LDAP connect to domain controller failed"

The thing is we do not have LDAP configured on ISE.

I checked on ISE and found the alerts in Reporting with the log id as 1634977810.

Below are the details of the error:

Event :- LDAP connect to domain controller failed

Error Details:- The password is incorrect for the given account

Failure Reason:- LDAP connect to domain controller failed

Resolution:- Check corresponding domain controller are available and error conditions.

But the thing is we don't have LDAP configured in the first place.

So why is the ISE creating such kind of error logs.  

I don't believe there is anything to worry for.

Any information on this would be helpful.

TIA.

[Mohammed al Baqari]

Hi,

Try to run a packet capture for sometime to the LDAP server reported by ISE
to confirm that it attempts connection. If it does, then LDAP is
definitely configured. Now try to view LDAP server using different browser
(I had issues where LDAP servers weren't showing with IE/Chrome but it
doesn't with firefox)

***** please remember to rate useful posts

[shubhampatki1994]

Hello Mohammed,

Thanks for the reply.

The LDAP was never configured on the ISE and we never intend to in the future.

If I navigate to Administration>External Identity Sources> LDAP, there is absolutely nothing. And that is the reason we are a bit amused as to why is ISE trying to authenticate to the LDAP server in the first place. Another thing is all the nodes are reporting this error in the cluster.

Any idea about this?? 

TIA

[hslai · Accepted solution]

> Failure Reason:- LDAP connect to domain controller failed

Check the Active Directory join point(s).