LdapProbeErrorType
The reason an LDAP connectivity probe failed, returned in LdapProbeError.error_type and
used to guide what to fix in the identity source configuration.
BASE_DN_NOT_FOUND: The configured base DN does not exist on the
LDAP server or is not readable.
BIND_DN_AND_PASSWORD_REQUIRED: This server is configured to
require a bind DN and password. Please add these to your
LDAP server configuration.
BIND_DN_INVALID: The bind DN or username provided is not valid
on the LDAP server. Check that the bind DN is correct.
This error may also indicate that the base DN in your
configuration is incorrect.
CERTIFICATE_HOSTNAME_MISMATCH_ERROR: The hostname configured for
the LDAP server does not match the hostname in the server's
certificate subject or alternative subject names. Be sure
that the hostname you configure in Installer matches one
of those names.
CERTIFICATE_MISMATCH_ERROR: The certificate presented by the
LDAP server did not match the certificate in the configuration
on the Installer.
CONNECTION_REFUSED: The connection was refused when contacting the
LDAP server. Ensure that the LDAP server is running and that
you are using the correct ip/hostname.
CONNECTION_TIMEOUT: The connection timed out when contacting
the LDAP server. Check the hostname/ip and any firewalls
between the Installer and the LDAP server.
GENERAL_ERROR: An undetermined error occurred.
INVALID_CONFIGURED_CERTIFICATE: The certificate configured for
this LDAP server is invalid and could not be decoded. Check
that the PEM-formatted certificate you provided is correct.
INVALID_CREDENTIALS: The username and/or password are incorrect.
SSL_HANDSHAKE_ERROR: An error occurred while establishing a secure
connection with the LDAP server. Check that the LDAP server's
certificate is correct, and that it is using an SSL/TLS
cipher suite that is compatible with the Installer.
This error can also occur if the hostname you have configured
for the LDAP server does not match any of the hostnames in
the Subject Alternative Name records in the server
certificate.
STARTTLS_FAILED: Unable to use StartTLS to upgrade the connection
to use TLS. Ensure that the LDAP server supports TLS and if
not, use LDAP or LDAPS as the protocol.
UNKNOWN_HOST: The hostname of the LDAP server could not be
resolved.
NO_ROUTE_TO_HOST: There is no network route to the host.
BIND_EXCEPTION: A socket to the remote host could not be opened.
PORT_UNREACHABLE: The LDAP port is not open on the remote host.
BASE_DN_NOT_WITHIN_DOMAIN: For Active Directory, the base DN
is not a subtree of the Domain Component tree corresponding
to the LDAP domain. For example, if the domain is
"example.com", the baseDN should be "dc=example, dc=com"
or a subtree like "ou=Users,dc=example,dc=com".
LDAP_SERVER_DISABLED: The LDAP server is marked as disabled
in the Installer configuration and will not be used.