1. Home
  2. Server
  3. Could not bind to the LDAP server error in Nagios

Could not bind to the LDAP server error in Nagios

Rsdaa 17/12/2021 81

Wondering how to fix the ‘could not bind to the LDAP server’ error in Nagios? We can help you fix it.

Here at Bobcares, we have seen several such Nagios-related issues as part of our Server Management Services for web hosts and online service providers.

Today we’ll take a look at the causes for this problem and see the fix.

When and why does ‘could not bind to the LDAP server’ error occurs

Recently, we had a customer who was trying and executing the check_ldaps plugin:

/usr/local/nagios/libexec/check_ldaps -H dc01.domain.local -b ” -p 636

As a result, he received the below error message.

Could not bind to the LDAP server

Also, he tried to enable the verbose mode -v for the plugin:

/usr/local/nagios/libexec/check_ldaps -H dc01.domain.local -b ” -p 636 -v

But it returned the below error message:

ldap_bind: Can’t contact LDAP server (-1)additional info: TLS error -8179:Peer’s Certificate issuer is not recognized.Could not bind to the LDAP server

Through this, we could find that the plugin did not have a CA certificate to validate the certificate. Now let’s see how to use certificate authority (CA) certificates with the check_ldaps plugin.

How to fix ‘could not bind to the LDAP server’ error

Now let’s see how our Support Engineers resolve this error for our customers.

The check_ldap plugin makes use of OpenLDAP. However, the OpenLDAP package is installed as part of the Nagios installation because the plugins have dependencies on it but it is left in a non-configured state.

So we need to create the CA certificate on the Nagios server and configure OpenLDAP to use the certificate.

We obtain the CA certificate from our CA and copy the contents of the certificate into a file on the Nagios XI server.

For that, we open an SSH session to the Nagios server.

* Create Certificate

Here we will create a certificate file called /etc/openldap/certs/windows_ca.cer and this is from a Microsoft Windows server.

So, we execute this command:

vi /etc/openldap/certs/windows_ca.cer

Then we paste the contents of our CA certificate into the SSH session.

After pasting the text, if a blank line is added after every line then we need to delete all of these blank lines. We simply press dd on keyboard to delete a blank line.

Finally, we save the changes and close the file.

* Update ldap.conf

The next step would be telling OpenLDAP to use this certificate.

So we execute the below command.

vi /etc/openldap/ldap.conf

After the file opens, we press the Down arrow until we reach the end of the file.

On a new line, we type the following:

TLS_CACERT /etc/openldap/certs/windows_ca.cer

Finally, we save the changes and close the file.

* Test Plugin

Now, the check_ldaps plugin should work:

/usr/local/nagios/libexec/check_ldaps -H dc01.domain.local -b ” -p 636

If it works, the following message is produced:

LDAP OK – 0.043 seconds response time|time=0.042861s;;;0.000000

[Need any further assistance in fixing Nagios errors? – We are here to help you]

Conclusion

Today, we saw the solution our Support Engineers provide a solution this Nagios problem.

PREVENT YOUR SERVER FROM CRASHING!

Never again lose customers to poor server speed! Let us help you.

Our server experts will monitor & maintain your server 24/7 so that it remains lightning fast and secure.

GET STARTED

var google_conversion_label = "owonCMyG5nEQ0aD71QM";


PREV: You can now pre-order the Huawei Watch GT 3 and GT 3 Runner in Malaysia from RM999

NEXT: Virtual hosts

Popular Articles

Hot Articles
  • So Elite Dangerous has been around the block a few times, and in recent years have started their own little naming scheme for game errors. Similar to Rare’s take on Sea of Thieves, Elite now uses a co...

  • The series so far:Reporting Services Basics: Overview and InstallationReporting Services Basics: Creating Your First ReportReporting Services Basics: Data Sources and DatasetsReporting Services Basics...

  • Connect to a Report Server in Management Studio05/07/20195 minutes to readIn this articleSQL Server Management Studio provides Object Explorer, which allows you to connect to any server in the SQL Ser...

  • VNC Server is not currently listening for cloud connectionsRealVNC services cannot establish a connection between your device and the remote computer.See Why is VNC Server not currently listening for...

  • The Barracuda Agent is a light weight agent that performs source deduplication, and securely transfers changes over port 5120. Use the following steps to resolve the "Failed to connect to backup agent...

Navigation Lists

Back to Top