Event ID: 12545 Could not connect to Active Directory/LDAP Server.
- 1.Failure to connect to an Active Directory/LDAP server
- 2.Although connection to Active Directory was attempted via LDAP, only connection using LDAPS is allowed for Active Directory
- 3.Connection to Active Directory’s port 636 was attempted, but Active Directory denied the connection
- 4.Although a request was sent to Active Directory via LDAP, there are no viewing privileges
- 5.Failed to connect to all Active Directory/LDAP servers
1.Failure to connect to an Active Directory/LDAP server
Phenomenon
The following event is output to Event Viewer.
| Log Level | Message |
|---|---|
| warn | [Overview] |
Description
Failure to connect to an Active Directory/LDAP server.
Support
Check whether the following parameters in the configuration file are configured correctly.
- ldap addresses, port, user, password, and base_dn
Check whether the Active Directory/LDAP servers are operating properly.
When an LDAPS connection is enabled, check whether LDAPS is correctly configured on Active Directory.
2.Although connection to Active Directory was attempted via LDAP, only connection using LDAPS is allowed for Active Directory
Phenomenon
The following event is output to Event Viewer.
| Log Level | Message |
|---|---|
| warn | [Overview] |
Description
Although connection to Active Directory was attempted via LDAP, only connection using LDAPS is allowed for Active Directory.
Support
Take any of the following actions.
- Allow LDAP communicator on Active Directory
- Enable STARTTLS on Directory Sync
Also, specify start_tls for ad.ldap.server.encryption.
3.Connection to Active Directory’s port 636 was attempted, but Active Directory denied the connection
Phenomenon
The following event is output to Event Viewer.
| Log Level | Message |
|---|---|
| warn | [Overview] |
Connection to Active Directory’s port 636 was attempted, but Active Directory denied the connection
Support
Check the following.
- Check for settings that allow Active Directory to deny connection
- When STARTTLS is enabled on Directory Sync, check whether 389 is specified as the connection port for improvement
Start STARTTLS communication with port 389, not with port 636.
4.Although a request was sent to Active Directory via LDAP, there are no viewing privileges
Phenomenon
The following event is output to Event Viewer.
| Log Level | Message |
|---|---|
| error | [Overview] |
Description
Although a request was sent to Active Directory via LDAP, there are no viewing privileges.
Support
Check whether users for connecting to Active Directory have privileges to view all users and groups that will be synchronized over Active Directory.
5.Failed to connect to all Active Directory/LDAP servers
Phenomenon
The following event is output to Event Viewer.
| Log Level | Message |
|---|---|
| error | [Overview] |
Description
Failed to connect to all Active Directory/LDAP servers.
Support
Check whether the following parameters in the configuration file are configured correctly.
- ldap addresses, port, user, password, and base_dn
Check whether the Active Directory/LDAP servers are operating properly.
When an LDAPS connection is enabled, check whether LDAPS is correctly configured on Active Directory.