Cannot remove LDAP server from configuration

[Biite]

Hi all,

I seem to have a weird problem here:
I'm trying to remove LDAP servers from a Brocade switch, but removal of the LDAP server fails:

AT1-AIS-SS-101:admin> aaaconfig --remove at1-ais-dc-02 -conf ldap
Configuration not found for LDAP server: at1-ais-dc-02

I directly copied the servername from the output of the 'aaaconfig --show' command.

I'm able to remove other (more recent) LDAP servers though.

Anyone got any brilliant idea's... or maybe a way to fully clear the AAA config on a Brocade switch?

[NimaG]

Hello Biite,

I understand that you are trying to remove the LDAP server.
You have already tried:
AT1-AIS-SS-101:admin> aaaconfig --remove at1-ais-dc-02 -conf ldap

And that errors out.

Please check with: aaaconfig --authspec local 

This is the default setting. Authenticates the user against the local database only. Please note, if the password does not match or the user is not defined, the login fails.

Reference: https://techdocs.broadcom.com/us/en/fibre-channel-networking/fabric-os/fabric-os-commands/9-1-x/Fabric-OS-Commands/aaaConfig.html

Thanks!

[Biite]

Hi Nima,

The configuration on the SAN switches currently has 4 LDAP servers configured (2 with LDAPS and 2 with STARTTLS).
I want to remove the 2 LDAP servers with the STARTTLS configuration, but those fail. Even though I used the EXACT name as shown in the output of the 'aaaconfig --show' command.

I've already tried setting the authspec to LOCAL only and then remove the LDAP servers, but that also fails with the same error.

It is not a user validation issue, but it is an LDAP server removal issue.

[Biite]

Will log an HPE support case now, as I see no easy way to resolve.

[support_s]

Hello,

Let us know if you were able to resolve the issue.

If you are satisfied with the answers then kindly click the "Accept As Solution" button for the most helpful response so that it is beneficial to all community members.

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

[Biite]

HPE case logged, no direct solution. HPE will discuss this now with Brocade/Broadcom.

[Biite]

Hi all,

A quick update: 

• Broadcom engineering state that this is a bug, initially to be fixed in FOS 10.0 (with a target release date of August 2025)
• It was stated that older FOS versions need a manual procedure to remove the old LDAP configuration
• Later message stated that it will be fixed in all open releases (10.0, 9.2.2a, 91.1e), with a tentative target date for FOS 9.x of April.