cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Cisco Community Designated VIP Class of 2020

358
Views
0
Helpful
1
Replies
Highlighted
Enthusiast

endpoint LDAP integration

Hi all!

I'm trying to figure out how to help a customer get user authentication using LDAP working for their endpoints.  It looks like the configuration is correct, but we keep getting the same error in the logs. 

authenticate: pam_ldap(login:auth): authorization failure; rhost=(null)

The error the user sees when logging in is "Invalid credentials".

 

If I understand it correctly, rhost is the AD server, yes?  Have tried it with Encryption on and off.  This type of error wouldn't occur if the filter or group were wrong, would it?  Any help would be appreciated.

Thanks!

Everyone's tags (2)
1 REPLY 1
Enthusiast

Re: endpoint LDAP integration

Update...

Going though the logs again I noticed that there was an Extension Mobility login attempt about the same time as every one of the LDAP login attempts.  One thing I forgot to mention is the endpoint is registered to CUCM.  Is endpoint LDAP authentication for Users not available if the endpoint is registered to CUCM?  From the admin guide it says it should be.  Additionally, Extension Mobility isn't even enabled.

Thanks!

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here