ILO 5 Firwmware 3.0 Login failed LDAP

[_tcpip_]

Hello everyone,

Login with AD Acoount in ILo 5 works 1 time and then only after an ILO reset again.

In ILO under Directory Server Settings, Test Settings, the first test also works. The second one fails with Error Message: 

Connect using SSL Failed Error Message: Session Expired. 

Bind to Directory Server Failed LDAP Server Connect Failed 

Connect to Directory Server Success  

LDAP port 636

tested against several DC ́s with serveral ILO5 Server. ILO4 works 

Certificates are O.K. A test with LDP.EXE works.

the behavior is new and we believe since the update to  ILO 5 3.0.

Does anyone know the problem?

THX

Daniel

Update:

We also have this behavior after a downgrade to ILO Firmware 2.98.

It may not be related to version 3.0 after all.

Perhaps this is also related to the security updates from Micosoft?

https://support.microsoft.com/de-de/topic/2020-2023-und-2024-ldap-kanalbindung-und-ldap-signaturanforderungen-f%C3%BCr-windows-kb4520412-ef185fb8-00f7-167d-744c-f299a66fc00a

[shiva_jr]

Hi _tcpip_,
   Please refer the post1, post2 and post3. These posts may help to understand and solve your problem.

Regards,
Shiva_JR

[_tcpip_]

@shiva_jr 

Hi Shiva

we have tested all 3 solutions.

none of them was the solution.

the Directory Test Controls hangs during the test.

You are logged out and can no longer log in.

Under Directory tests it then says

Directory tests are currently: Aborting

but this does not happen. only an ilo reset helps and then you can log in again with an AD account. 1-2 times maybe then it doesn't work again.

tcpip

[Tom Mucha_1]

@_tcpip_ 

Hi tcpip - were you ever able to resolve this?  I started running into this after updating some firmware and I can't seem to figure it out.  We're doing LDAPS to Active Directory, which was working fine in the old firmware.  I was going to attempt setting up Kerberos to see if that will at least work in the interim.

Tom