Clearing LDAP Alert

[rburns042]

I want to get a small point of clarification.

If I have:

 <faultInst
 ack="no"
 cause="fsm-failed"
 changeSet=""
 
 code="F999619"
 created="2016-11-22T02:44:01"
 descr="[FSM:FAILED]: external aaa server configuration(FSM:sam:dme:AaaEpUpdateEp)"
 dn="sys/ldap-ext/fault-F999619"
 highestSeverity="critical"
 id="15687205"
 lastTransition="2016-11-22T02:44:01"
 lc=""
 occur="1"
 origSeverity="critical"
 prevSeverity="critical"
 
 rule="fsm-sam-dme-aaa-ep-update-ep-fsm-fail"
 severity="critical"
 status="created"
 tags="fsmstagefail"
 type="fsm">
 </faultInst>

and I acknowledge the fault, it will clear out if the underlying cause of the LDAP fault is no longer present, correct?

[Wes Austin · Accepted solution]

This fault is indicative that AAA configuration changes were attempting to be made but were not successful. We typically see this when users attempt to make changes to an authentication domain while it is actively being used for native authentication.

The best way to clear this fault is to set the Default Authentication back to local, make whatever changes you were going to make, and then return the Default authentication back to LDAP/TACACS/RADIUS, etc.

You can make the changes here. Admin > User Management > Native Authentication

HTH,

Wes