Possible LDAP errors on EPRS due to misconfiguration

03/26/2020 10 People found this article helpful 197,031 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

Possible LDAP errors on EPRS due to misconfiguration

Resolution

Firmware/Software Version:  CF client feature release firmware for 5.9.0.4 onwards on Gen 5 devices, 6.1.1.6 onwards for Gen 6 devices, 6.1.2.1 onwards for NSA2600
Services: Client CF enforcement, EPRS, LDAP on EPRS
 

The following document includes the "Test LDAP settings" feature and describes the possible LDAP errors on EPRS when LDAP is mis-configured:

1. When Sonicwall is blocking the LDAP/LDAPS port or an Invalid port is entered on the LDAP settings on EPRS

  2. When the host/IP of the configured AD server is not reachable. 

  3. When an incorrect LDAP protocol version is selected.

  4. When the AD/LDAP server is not configured for Anonymous binding




  5. When an incorrect bind distinguished name is provided; eg: providing username instead of full DN
 
  6. When an invalid bind DN is provided

  7. When invalid/expired login password is provided on the LDAP settings

  8. When an incorrect username is provided when Give login name/ location tree is selected

  9. When an invalid primary domain is provided

  10. When an invalid user tree is specified  

  11. When an incorrect username/password is entered during connectivity test
 

Related Articles

• Bandwidth usage and tracking in SonicWall
• How to force an update of the Security Services Signatures from the Firewall GUI
• Configure Guest VLAN in the TZ firewall, for guest users to access Internet only.

Categories

• Firewalls > TZ Series
• Firewalls > SonicWall SuperMassive E10000 Series
• Firewalls > SonicWall SuperMassive 9000 Series
• Firewalls > SonicWall NSA Series