topic Re: Cannot remove LDAP server from configuration in HPE Storage Networking - Switches

Cannot remove LDAP server from configuration

Biite — Wed, 22 Jan 2025 06:10:31 GMT

Hi all,

I seem to have a weird problem here:
I'm trying to remove LDAP servers from a Brocade switch, but removal of the LDAP server fails:

AT1-AIS-SS-101:admin> aaaconfig --remove at1-ais-dc-02 -conf ldap
Configuration not found for LDAP server: at1-ais-dc-02

I directly copied the servername from the output of the 'aaaconfig --show' command.

I'm able to remove other (more recent) LDAP servers though.

Anyone got any brilliant idea's... or maybe a way to fully clear the AAA config on a Brocade switch?

Re: Cannot remove LDAP server from configuration

NimaG — Thu, 16 Jan 2025 16:06:56 GMT

Hello Biite,

I understand that you are trying to remove the LDAP server.
You have already tried:
AT1-AIS-SS-101:admin> aaaconfig --remove at1-ais-dc-02 -conf ldap

And that errors out.

Please check with: aaaconfig --authspec local

This is the default setting. Authenticates the user against the local database only. Please note, if the password does not match or the user is not defined, the login fails.

Reference: https://techdocs.broadcom.com/us/en/fibre-channel-networking/fabric-os/fabric-os-commands/9-1-x/Fabric-OS-Commands/aaaConfig.html

Thanks!

Re: Cannot remove LDAP server from configuration

Biite — Thu, 16 Jan 2025 16:15:06 GMT

Hi Nima,

The configuration on the SAN switches currently has 4 LDAP servers configured (2 with LDAPS and 2 with STARTTLS).
I want to remove the 2 LDAP servers with the STARTTLS configuration, but those fail. Even though I used the EXACT name as shown in the output of the 'aaaconfig --show' command.

I've already tried setting the authspec to LOCAL only and then remove the LDAP servers, but that also fails with the same error.

It is not a user validation issue, but it is an LDAP server removal issue.

Re: Cannot remove LDAP server from configuration

Biite — Mon, 20 Jan 2025 07:25:59 GMT

Will log an HPE support case now, as I see no easy way to resolve.

Query: Cannot remove LDAP server from configuration

support_s — Mon, 27 Jan 2025 10:45:10 GMT

Hello,

Let us know if you were able to resolve the issue.

If you are satisfied with the answers then kindly click the "Accept As Solution" button for the most helpful response so that it is beneficial to all community members.

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Re: Cannot remove LDAP server from configuration

Biite — Mon, 27 Jan 2025 11:15:15 GMT

HPE case logged, no direct solution. HPE will discuss this now with Brocade/Broadcom.

Re: Cannot remove LDAP server from configuration

Biite — Mon, 14 Apr 2025 15:01:05 GMT

Hi all,

A quick update:

Broadcom engineering state that this is a bug, initially to be fixed in FOS 10.0 (with a target release date of August 2025)
It was stated that older FOS versions need a manual procedure to remove the old LDAP configuration
Later message stated that it will be fixed in all open releases (10.0, 9.2.2a, 91.1e), with a tentative target date for FOS 9.x of April.