using generic ldap - ext db

[dhn1cisco]

we are having difficulty accessing our ldap db using the ext db feature in acs 3.0x we get "ldap server not reachable. please check configuration"

cisco tac assistance logs show ldap_busy error, 51. we can connect to ldap server using a ldap browser with same context/accounts. any ideas? i'm in dire straits here, help!

[mhoda]

Hello,

This problem requires little bit of in depth troubleshooting. However, if you can setup the logging level to Full and get the problem portion of the auth.log file for us, we should be able to point you to the right direction. In nitshell, please make sure that you have defined the proper context for the admin account. Also, if you are defining the domain name for the LDAP server on ACS, try with the ip address and see if that helps. In any case, would be interested to see the auth.log file with logging level set to FULL. Here is how to set to logging level to full:

http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_tech_note09186a00800afec1.shtml#set_log

Thanks,

Mynul