# LDAP connection to elastic search **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [December 20, 2019, 1:39pm UTC](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667 "2019-12-20T13:39:08Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![tanvi.m.gundalwar](https://avatars.discourse-cdn.com/v4/letter/t/ed655f/32.png) [@tanvi.m.gundalwar](https://discuss.elastic.co/u/tanvi.m.gundalwar)\ **Post date:** [December 20, 2019, 1:39pm UTC](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667/1 "2019-12-20T13:39:09Z")
We are using Elasticsearch 6.6.1 and configuring an Active Directory realm. in elasticsearch.yml, we have following entries: xpack: security: authc: realms: active\_directory: type: active\_directory order: 0 domain\_name: [ldap.deu.adt.accenture.com](http://ldap.deu.adt.accenture.com) bind\_dn: [A02957DIRNCLM\_REPT@accenture.com](mailto:A02957DIRNCLM_REPT@accenture.com) After that added bind password by below command : bin/elasticsearch-keystore add xpack.security.authc.realms.active\_directory.my\_ad.secure\_bind\_password we made enteries in role\_mapping.yml as below : power\_user: - "cn=A02957DIRNCLM\_REPT,cn=Users,dc=accenture,dc=com" After starting elasticsearch getting logs attached in image : ![MicrosoftTeams-image (1)](https://us1.discourse-cdn.com/elastic/original/3X/4/d/4dca98fa9f7c7d8e51c39acccac0884b06cedd06.png) Kindly help with this. Thanks, Tanvi ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [December 23, 2019, 12:18am UTC](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667/2 "2019-12-23T00:18:58Z")
Please don't post images of text as they are hard to read, may not display correctly for everyone, and are not searchable, and please don't post unformatted code as it's very hard to read. Instead, paste the text and format it with \ icon or pairs of triple backticks (```), and check the preview window to make sure it's properly formatted before posting it. This makes it more likely that your question will receive a useful answer. It would be great if you could update your post to solve this. ---
**Author:** ![tanvi.m.gundalwar](https://avatars.discourse-cdn.com/v4/letter/t/ed655f/32.png) [@tanvi.m.gundalwar](https://discuss.elastic.co/u/tanvi.m.gundalwar)\ **Post date:** [December 24, 2019, 11:17am UTC](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667/3 "2019-12-24T11:17:46Z")
Hi, In elasticserach.yml, we have following content related to active directory: xpack: security: authc: realms: active\_directory: type: active\_directory order: 0 domain\_name: [ds.dev.accenture.com](http://ds.dev.accenture.com) url: ldaps://amrdc1711.ds.dev.accenture.com:389 bind\_dn: [adt\_ldap@ds.dev.accenture.com](mailto:adt_ldap@ds.dev.accenture.com) Then we set bind\_dn password. Below is the content which we get after keystore password list: [ads.tgundalwar@vw526474 bin]$ ./elasticsearch-keystore list bootstrap.password keystore.seed xpack.security.authc.realms.active\_directory.secure\_bind\_password xpack.security.http.ssl.keystore.secure\_password xpack.security.http.ssl.truststore.secure\_password xpack.security.transport.ssl.keystore.secure\_password xpack.security.transport.ssl.truststore.secure\_password After firing below ldapsearch we are able to retrieve the appropriate data from group almadmindev : ldapsearch -x -D "[adt\_ldap@ds.dev.accenture.com](mailto:adt_ldap@ds.dev.accenture.com)" -W -p 389 -h [amrdc1711.ds.dev.accenture.com](http://amrdc1711.ds.dev.accenture.com) -b "CN=almadmindev,OU=Groups,DC=ds,DC=dev,DC=accenture,DC=com" -s sub "(objectclass=\*)" But facing below issue after trying to connect : [2019-12-24T04:10:34,198][WARN][o.e.x.s.a.AuthenticationService] [WMDjAWI] Authentication to realm active\_directory failed - authenticate failed (Caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812'))')) [2019-12-24T04:34:03,824][DEBUG][o.e.x.s.a.l.s.LdapUtils] [WMDjAWI] LDAP bind [SimpleBindRequest(dn='adt\_ldap@ds.dev.accenture.com')] failed for [LDAPConnectionPool(serverSet=FailoverServerSet(serverSets={SingleServerSet([server:389=amrdc1711.ds.dev.accenture.com](http://server:389=amrdc1711.ds.dev.accenture.com), includesAuthentication=false, includesPostConnectProcessing=false)}), maxConnections=20)] - [LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812'))')] [2019-12-24T04:34:03,825][DEBUG][o.e.x.s.a.l.LdapRealm] [WMDjAWI] Exception occurred during authenticate for active\_directory/active\_directory com.unboundid.ldap.sdk.LDAPException: An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812')) at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:870) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:760) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:710) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.(LDAPConnection.java:534) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.SingleServerSet.getConnection(SingleServerSet.java:307) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.FailoverServerSet.getConnection(FailoverServerSet.java:653) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1285) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1258) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.getConnection(LDAPConnectionPool.java:1792) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.bindAndRevertAuthentication(LDAPConnectionPool.java:1615) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils$1.lambda$doRun$0(LdapUtils.java:136) ~[x-pack-security-6.6.1.jar:6.6.1] at java.security.AccessController.doPrivileged(Native Method) ~[?:?] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.privilegedConnect(LdapUtils.java:75) ~[x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils$1.doRun(LdapUtils.java:136) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.maybeForkAndRun(LdapUtils.java:101) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.maybeForkThenBindAndRevert(LdapUtils.java:152) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySessionFactory$ADAuthenticator.authenticate(ActiveDirectorySessionFactory.java:285) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySessionFactory.getSessionWithPool(ActiveDirectorySessionFactory.java:116) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.PoolingSessionFactory.session(PoolingSessionFactory.java:101) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.LdapRealm.lambda$doAuthenticate$1(LdapRealm.java:129) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.LdapRealm$CancellableLdapRunnable.doRun(LdapRealm.java:312) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:759) [elasticsearch-6.6.1.jar:6.6.1] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-6.6.1.jar:6.6.1] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?] at java.lang.Thread.run(Thread.java:834) [?:?] Caused by: java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812') at com.unboundid.ldap.sdk.LDAPConnectionInternals.(LDAPConnectionInternals.java:178) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:860) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] ... 26 more Caused by: com.unboundid.ldap.sdk.LDAPException: Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812 at com.unboundid.util.ssl.HostNameSSLSocketVerifier.verifySSLSocket(HostNameSSLSocketVerifier.java:146) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionInternals.(LDAPConnectionInternals.java:166) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:860) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] ... 26 more Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated at sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:558) ~[?:?] at com.unboundid.util.ssl.HostNameSSLSocketVerifier.verifySSLSocket(HostNameSSLSocketVerifier.java:113) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionInternals.(LDAPConnectionInternals.java:166) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:860) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] ... 26 more [2019-12-24T04:34:03,828][WARN][o.e.x.s.a.AuthenticationService] [WMDjAWI] Authentication to realm active\_directory failed - authenticate failed (Caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812'))')) ---
**Author:** ![tanvi.m.gundalwar](https://avatars.discourse-cdn.com/v4/letter/t/ed655f/32.png) [@tanvi.m.gundalwar](https://discuss.elastic.co/u/tanvi.m.gundalwar)\ **Post date:** [December 24, 2019, 11:28am UTC](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667/4 "2019-12-24T11:28:35Z")
Hi, In elasticserach.yml, we have following content related to active directory: xpack: security: authc: realms: active\_directory: type: active\_directory order: 0 domain\_name: [ds.dev.accenture.com](http://ds.dev.accenture.com/) url: ldaps://amrdc1711.ds.dev.accenture.com:389 bind\_dn: [adt\_ldap@ds.dev.accenture.com](mailto:adt_ldap@ds.dev.accenture.com) Then we set bind\_dn password. Below is the content which we get after keystore password list: [ads.tgundalwar@vw526474 bin]$ ./elasticsearch-keystore list bootstrap.password keystore.seed xpack.security.authc.realms.active\_directory.secure\_bind\_password xpack.security.http.ssl.keystore.secure\_password xpack.security.http.ssl.truststore.secure\_password xpack.security.transport.ssl.keystore.secure\_password xpack.security.transport.ssl.truststore.secure\_password After firing below ldapsearch we are able to retrieve the appropriate data from group almadmindev : ldapsearch -x -D "[adt\_ldap@ds.dev.accenture.com](mailto:adt_ldap@ds.dev.accenture.com)" -W -p 389 -h [amrdc1711.ds.dev.accenture.com](http://amrdc1711.ds.dev.accenture.com/) -b "CN=almadmindev,OU=Groups,DC=ds,DC=dev,DC=accenture,DC=com" -s sub "(objectclass=\*)" But facing below issue after trying to connect : [2019-12-24T04:10:34,198][WARN][o.e.x.s.a.AuthenticationService] [WMDjAWI] Authentication to realm active\_directory failed - authenticate failed (Caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812'))')) [2019-12-24T04:34:03,824][DEBUG][o.e.x.s.a.l.s.LdapUtils] [WMDjAWI] LDAP bind [SimpleBindRequest(dn='adt\_ldap@ds.dev.accenture.com')] failed for [LDAPConnectionPool(serverSet=FailoverServerSet(serverSets={SingleServerSet([server:389=amrdc1711.ds.dev.accenture.com](http://server:389=amrdc1711.ds.dev.accenture.com/), includesAuthentication=false, includesPostConnectProcessing=false)}), maxConnections=20)] - [LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812'))')] [2019-12-24T04:34:03,825][DEBUG][o.e.x.s.a.l.LdapRealm] [WMDjAWI] Exception occurred during authenticate for active\_directory/active\_directory com.unboundid.ldap.sdk.LDAPException: An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812')) at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:870) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:760) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:710) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.(LDAPConnection.java:534) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.SingleServerSet.getConnection(SingleServerSet.java:307) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.FailoverServerSet.getConnection(FailoverServerSet.java:653) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1285) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1258) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.getConnection(LDAPConnectionPool.java:1792) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.bindAndRevertAuthentication(LDAPConnectionPool.java:1615) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils$1.lambda$doRun$0(LdapUtils.java:136) ~[x-pack-security-6.6.1.jar:6.6.1] at java.security.AccessController.doPrivileged(Native Method) ~[?:?] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.privilegedConnect(LdapUtils.java:75) ~[x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils$1.doRun(LdapUtils.java:136) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.maybeForkAndRun(LdapUtils.java:101) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.maybeForkThenBindAndRevert(LdapUtils.java:152) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySessionFactory$ADAuthenticator.authenticate(ActiveDirectorySessionFactory.java:285) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.ActiveDirectorySessionFactory.getSessionWithPool(ActiveDirectorySessionFactory.java:116) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.PoolingSessionFactory.session(PoolingSessionFactory.java:101) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.LdapRealm.lambda$doAuthenticate$1(LdapRealm.java:129) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.xpack.security.authc.ldap.LdapRealm$CancellableLdapRunnable.doRun(LdapRealm.java:312) [x-pack-security-6.6.1.jar:6.6.1] at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:759) [elasticsearch-6.6.1.jar:6.6.1] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:37) [elasticsearch-6.6.1.jar:6.6.1] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) [?:?] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) [?:?] at java.lang.Thread.run(Thread.java:834) [?:?] Caused by: java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812') at com.unboundid.ldap.sdk.LDAPConnectionInternals.(LDAPConnectionInternals.java:178) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:860) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] ... 26 more Caused by: com.unboundid.ldap.sdk.LDAPException: Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812 at com.unboundid.util.ssl.HostNameSSLSocketVerifier.verifySSLSocket(HostNameSSLSocketVerifier.java:146) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionInternals.(LDAPConnectionInternals.java:166) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:860) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] ... 26 more Caused by: javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated at sun.security.ssl.SSLSessionImpl.getPeerCertificates(SSLSessionImpl.java:558) ~[?:?] at com.unboundid.util.ssl.HostNameSSLSocketVerifier.verifySSLSocket(HostNameSSLSocketVerifier.java:113) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionInternals.(LDAPConnectionInternals.java:166) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:860) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] ... 26 more [2019-12-24T04:34:03,828][WARN][o.e.x.s.a.AuthenticationService] [WMDjAWI] Authentication to realm active\_directory failed - authenticate failed (Caused by LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server [amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/): IOException(LDAPException(resultCode=91 (connect error), errorMessage='Unable to verify an attempt to to establish a secure connection to '[amrdc1711.ds.dev.accenture.com:389](http://amrdc1711.ds.dev.accenture.com:389/)' because an unexpected error was encountered during validation processing: SSLPeerUnverifiedException(peer not authenticated), ldapSDKVersion=4.0.8, revision=28812'))')) ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [January 21, 2020, 11:28am UTC](https://discuss.elastic.co/t/ldap-connection-to-elastic-search/212667/5 "2020-01-21T11:28:36Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.