endpoint LDAP integration

Bob Fitzgerald · ‎10-09-2018

Hi all!

I'm trying to figure out how to help a customer get user authentication using LDAP working for their endpoints. It looks like the configuration is correct, but we keep getting the same error in the logs.

authenticate: pam_ldap(login:auth): authorization failure; rhost=(null)

The error the user sees when logging in is "Invalid credentials".

If I understand it correctly, rhost is the AD server, yes? Have tried it with Encryption on and off. This type of error wouldn't occur if the filter or group were wrong, would it? Any help would be appreciated.

Thanks!

Bob Fitzgerald · ‎10-10-2018

Update...

Going though the logs again I noticed that there was an Extension Mobility login attempt about the same time as every one of the LDAP login attempts. One thing I forgot to mention is the endpoint is registered to CUCM. Is endpoint LDAP authentication for Users not available if the endpoint is registered to CUCM? From the admin guide it says it should be. Additionally, Extension Mobility isn't even enabled.

Thanks!