LDAP service is down after upgrading to 13.0 build 82, 12.1 build 62

LDAP service is down after upgrading to 13.0 build 82, 12.1 build 62

book

Article ID: CTX321196

calendar_today

Updated On:

Description

  • LDAP LB Vservice configured with User monitor script (nsldap.pl) showing down after upgrading to 13.0 build 82 /12.1 build 62. 
  • User authentication fails.

Resolution

The issue is fixed in 13.0 build 83.x build.

Workaround
  1. Download new nsldap.pl script from the .zip file.
  2. Save the downloaded nsldap.pl to /var/directory
    • If necessary, run the below command to set appropriate permissions to the downloaded nsldap.pl file
    • > chmod 555 nsldap.pl
  3. Take a backup of nsldap.pl located at /netscaler/monitors/nsldap.pl
    • To take the backup, move the file from its current location, here are the commands
    • > mv /netscaler/monitors/nsldap.pl  /var/nsldap.pl.old
  4. Modifying rc.netscaler
  • rc.netscaler is located under /flash/nsconfig/
  • If rc.netscaler is not present, create using the command "touch rc.netscaler"
  • Edit rc.netscaler using command "vi rc.netscaler " and add the following lines to the end of the file and save
  • This is to ensure a new nsldap.pl is used after a reboot
  1. Reboot or Upgrade the ADC to the required version.

Problem Cause

It's a bug. The LDAP monitor using default LDAP perl script (nsldap.pl) is sending wrong passwords to AD Causing monitors, services, and load balancing vservers and LDAP authentication to go down