CMK version: Checkmk Raw Edition 2.3.0p16
OS version: Debian Bookworm
Error message: No connect to Active Directory (AD) - But, realm works?!
Hello all,
i will setup Active Directory Access on my checkMK. I use this doku: ** User management with LDAP/Active Directory** from docs.checkmk.com
from a bash shell, with “realm” i can connect my AD (DC) windows Server, also ping and nslookup works
/omd/sites/$MYHOST/var/log/web.log tells me:
File "/omd/sites/monitoring/lib/python3/cmk/gui/wato/pages/ldap.py", line 864, in page
state, msg = test_func(connection, address)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/omd/sites/monitoring/lib/python3/cmk/gui/wato/pages/ldap.py", line 961, in _test_group_count
connection.connect(enforce_new=True, enforce_server=address)
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/ldap_connector.py", line 414, in connect
raise MKLDAPException(_("LDAP connection failed:\n%s") % ("\n".join(errors)))
cmk.gui.userdb.ldap_connector.MKLDAPException: LDAP-Verbindung gescheitert:
Ich kann den LDAP-Server mit den angegebenen Verbindungsdaten nicht erreichen. Bitte korrigieren in <a href="wato.py?mode=ldap_config">LDAP -Einstellungen</a>.
2024-10-11 13:01:02,617 [40] [cmk.web 1560127] Exception (admins, userdb_job): Traceback (most recent call last):
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/_user_sync.py", line 206, in _execute_sync_action
connection.do_sync(
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/ldap_connector.py", line 1302, in do_sync
ldap_users = self.get_users()
^^^^^^^^^^^^^^^^
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/ldap_connector.py", line 918, in get_users
for dn, ldap_user in self._ldap_search(
^^^^^^^^^^^^^^^^^^
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/ldap_connector.py", line 763, in _ldap_search
raise MKLDAPException(
cmk.gui.userdb.ldap_connector.MKLDAPException: Unable to successfully perform the LDAP search (LDAP connection failed:
Unable to connect to LDAP server with the configured bind credentials. Please fix this in the <a href="wato.py?mode=ldap_config">LDAP connection settings</a>.)
2024-10-11 13:02:02,931 [40] [cmk.web 1582705] Exception (admins, userdb_job): Traceback (most recent call last):
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/_user_sync.py", line 206, in _execute_sync_action
connection.do_sync(
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/ldap_connector.py", line 1302, in do_sync
ldap_users = self.get_users()
^^^^^^^^^^^^^^^^
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/ldap_connector.py", line 918, in get_users
for dn, ldap_user in self._ldap_search(
^^^^^^^^^^^^^^^^^^
File "/omd/sites/monitoring/lib/python3/cmk/gui/userdb/ldap_connector.py", line 763, in _ldap_search
raise MKLDAPException(
cmk.gui.userdb.ldap_connector.MKLDAPException: Unable to successfully perform the LDAP search (LDAP connection failed:
Unable to connect to LDAP server with the configured bind credentials. Please fix this in the <a href="wato.py?mode=ldap_config">LDAP connection settings</a>.)
I have created a USER in the AD (checkMK) which could have read access to the AD directory.
What do I have to do - or what am I doing wrong?
Thanks 4 help