Ask the Community
Groups
AD Authentication issues - LDAP Bind Failure - Connect IT Community | Kaseya
<main> <article class="userContent"> <h2 data-id="issue"><strong>ISSUE</strong></h2> <p>Unable to login to UI using AD creds after successfully setting up under Users. When looking in the /var/log/httpd/ssl_error.log the following error was seen:<br><br>PHP Warning: ldap_bind(): Unable to bind to server: Strong(er) authentication required in</p> <h2 data-id="resolution"><strong>RESOLUTION</strong></h2> <p>LDAP/Active Directory authentication issue<br>The following Group Policy settings needed to be modified to match the working AD DCs for logons to work with an AD account and the Unitrends appliance.<br><br><b>Local Computer Policy</b><br> └ - - Computer Configuration<br> └ - - - - Windows Settings<br> └ - - - - Security Settings<br> └ - - - - Local Policies<br> └ - - - - Security Options<br> <b>Set to 'None' >>> </b> └ - - - - Network security: LDAP client signing requirements<br><br><b>Default Domain Controller Policy</b><br> └ - - Computer Configuration<br> └ - - - - Windows Settings<br> └ - - - - Security Settings<br> └ - - - - Local Policies<br> └ - - - - Security Options<br> <b> Set to 'None' >>> </b> └ - - - - Domain Controller: LDAP server signing requirements</p> <h2 data-id="tasks"><strong>TASKS</strong></h2> <p><b>Please see Microsoft Document 935834 "How to enable LDAP signing in Windows Server</b><br><a rel="nofollow" href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F935834%2Fhow-to-enable-ldap-signing-in-windows-server">https://support.microsoft.com/en-us/help/935834/how-to-enable-ldap-signing-in-windows-server</a><br><br><b>Network security: LDAP client signing requirements</b> </p> <div><img alt="Network security: LDAP client signing requirements" src="https://us.v-cdn.net/6032361/uploads/migrated/6ZLU4TFNQ8BV/eid-ka83r000000k9oh-feoid-00n40000003czok-refid-0em3r000000xps1." class="embedImage-img importedEmbed-img"></img></div> <div> <br><b>Domain Controller: LDAP server signing requirements<br><img alt="User-added image" src="https://us.v-cdn.net/6032361/uploads/migrated/IYQSFTS5N66C/eid-ka83r000000k9oh-feoid-00n40000003czok-refid-0em3r000000xps6." class="embedImage-img importedEmbed-img"></img></b> </div> </article> </main>