topic Re: rsadmin auth -activeDirectory error in BladeSystem - General

rsadmin auth -activeDirectory error

wlchoo — Thu, 10 Jun 2021 06:39:49 GMT

Hi,

I'm setting up IRS active directory auth (rsadmin auth -activeDirectory) in Windows Server 2019, however I'm getting the following errors:

Exception : Could not find Active Directory during DNS look up. Please check the Domain name entered and try again.

I'm stucked and can't proceed with further configuration. Any suggestions are welcome.

Thanks & Regards

Re: rsadmin auth -activeDirectory error

ksram — Wed, 16 Jun 2021 02:02:23 GMT

Hi,

Good day!

May we please know if you have tried any steps and what is the current status.

Also do confirm if the DNS IP is pingable and if on same Network.

Thank you

RamKS

Re: rsadmin auth -activeDirectory error

mgearhart — Tue, 13 Jul 2021 19:58:08 GMT

I'm expericing the same issue when attempting to switch to Active Directory, using the command "rsadmin auth -activeDirectory":

"Exception : Could not find Active Directory during DNS look up. Please check the Domain name entered and try again."

I'm able to ping the basedn from the node and confirmed AD and the node I am attempting to connect from are on the same network.

Thanks for the assistance,

-Michael

Re: rsadmin auth -activeDirectory error

Olvi_1 — Thu, 15 Jul 2021 11:21:01 GMT

Hi!

"Nice" to know that others have same issue. Our IRS installation is over two years old but abouth month ago I noticed that I cannot login anymore.

Today I had finally time to investigate this. Looking at logfile (C:\ProgramData\HP\RS\LOG\hprs-<date>.log) it seems to be some certificate issue when running rsadmin auth -activeDirectory command:

15 Jul 2021 13:39:36.050 [Thread-5] ERROR c.h.u.accounts.IRSAccountInfoManager - Certificate cannot be validated against a trusted root CA. Exception:(Illegal given domain name: <DOMAINCONTROLLER>.)
15 Jul 2021 13:39:36.097 CLIInterpreter[CLI] ERROR c.h.u.accounts.IRSAccountInfoManager - Certificate cannot be validated against a trusted root CA. Exception:(Illegal given domain name: <DOMAINCONTROLLER>.)
15 Jul 2021 13:39:36.112 CLIInterpreter[CLI] INFO com.hp.uca.auth.UcaLdap - Could not log into LDAP server using SSL. Trying to use non-SSL connections

Keeping story short, after few hours of "head to the keyboard" I was managed to get login working again with following command:

rsadmin auth -activeDirectory -server "<DOMAINCONTROLLER>" -ssloff -port 389 -domain "<DOMAIN>" -basedn "DC=examble,DC=com" -admindn "CN=IRS_Admins,OU=Groups,DC=examble,DC=com" -operdn

Don't know root cause what has happend and honestly don't care since now login works. Hopefully this helps somehow.