AcceptSecurityContext error, data 532

Elastic Stack Elasticsearch
1

Crazy print domain authentication failed in my Elasticsearch logs today

{"type": "server", "timestamp": "2022-04-18T08:55:38,254Z", "level": "WARN", "component": "o.e.x.s.a.AuthenticationService", "cluster.name": "Elasticsearch", "node.name": "Elasticsearch-data-0", "message": "Authentication to realm my_ad failed - authenticate failed (Caused by LDAPException(resultCode=49 (invalid credentials), diagnosticMessage='80090308: LdapErr: DSID-0C090447, comment: AcceptSecurityContext error, data 532, v3839\u0000', ldapSDKVersion=4.0.8, revision=28812))", "cluster.uuid": "_wzs-T4YQ3Kow34VH5RYbA", "node.id": "Rqtii0AnT8eP0JcyP-6AVQ" }

2

Is this someone logging into Elasticsearch constantly, or is there a problem with the authentication between Elasticsearch and the ad domain

3

Looks like the lattter to me.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.