# LDAP Integration not working as expected **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [July 21, 2023, 5:48am UTC](https://discuss.elastic.co/t/ldap-integration-not-working-as-expected/338921 "2023-07-21T05:48:19Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![forabraham1](https://avatars.discourse-cdn.com/v4/letter/f/7feea3/32.png) [@forabraham1](https://discuss.elastic.co/u/forabraham1)\ **Post date:** [July 21, 2023, 5:48am UTC](https://discuss.elastic.co/t/ldap-integration-not-working-as-expected/338921/1 "2023-07-21T05:48:19Z")
We've integrated Elastisearch with LDAP, but it is not working as expected followed the same steps provided in the documentation. Could some one take a look and what is wrong in the config. **Issue:** Exception thrown saying Invalid Credential, however we're 100% sure that the user name is active and valid password. **Config** ```auto xpack: security: authc: realms: native: native1: order: 0 ldap: ldap1: order: 1 url: "ldaps://xxxxxxxxx:636" ssl: certificate_authorities: ["/etc/elasticsearch/certs/xxxxx.cer","/etc/elasticsearch/certs/xxxxx.cer","/etc/elasticsearch/certs/xxxxx.cer"] bind_dn: "cn=xxx.xx@mgt.bps,OU=Users,OU=RBAC,OU=BPS,DC=mgt,DC=bps" user_search: base_dn: "OU=Users,OU=RBAC,OU=BPS,DC=mgt,DC=bps" filter: "(cn={0})" group_search: base_dn: "OU=Tasks,OU=RBAC,OU=BPS,DC=mgt,DC=bps" filter: "objectClass=group" files: role_mapping: "/etc/elasticsearch/role_mapping.yml" unmapped_groups_as_roles: false [2023-07-19T11:55:56,779][WARN][o.e.x.s.a.l.s.LdapUtils] [xxxxx] Failed to obtain LDAP connection from pool - LDAPException(resultCode=49 (invalid credentials), diagnosticMessage='80090308: LdapErr: DSID-0C090447, comment: AcceptSecurityContext error, data 52e, v3839', ldapSDKVersion=4.0.8, revision=28812) [2023-07-19T11:55:56,783][DEBUG][o.e.x.s.a.l.LdapRealm] [xxxxx] Exception occurred during authenticate for ldap/ldap1 com.unboundid.ldap.sdk.LDAPBindException: 80090308: LdapErr: DSID-0C090447, comment: AcceptSecurityContext error, data 52e, v3839 at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1372) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1258) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at com.unboundid.ldap.sdk.LDAPConnectionPool.getConnection(LDAPConnectionPool.java:1792) ~[unboundid-ldapsdk-4.0.8.jar:4.0.8] at java.security.AccessController.doPrivileged(AccessController.java:569) ~[?:?] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.privilegedConnect(LdapUtils.java:76) ~[x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.searchForEntry(LdapUtils.java:296) [x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.xpack.security.authc.ldap.support.LdapUtils.searchForEntry(LdapUtils.java:231) [x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.xpack.security.authc.ldap.LdapUserSearchSessionFactory.findUser(LdapUserSearchSessionFactory.java:271) [x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.xpack.security.authc.ldap.LdapUserSearchSessionFactory.getSessionWithPool(LdapUserSearchSessionFactory.java:84) [x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.xpack.security.authc.ldap.PoolingSessionFactory.session(PoolingSessionFactory.java:108) [x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.xpack.security.authc.ldap.LdapRealm.lambda$doAuthenticate$1(LdapRealm.java:147) [x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.xpack.security.authc.ldap.LdapRealm$CancellableLdapRunnable.doRun(LdapRealm.java:343) [x-pack-security-7.17.6.jar:7.17.6] at org.elasticsearch.common.util.concurrent.ThreadContext$ContextPreservingAbstractRunnable.doRun(ThreadContext.java:777) [elasticsearch-7.17.6.jar:7.17.6] at org.elasticsearch.common.util.concurrent.AbstractRunnable.run(AbstractRunnable.java:26) [elasticsearch-7.17.6.jar:7.17.6] at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1136) [?:?] at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) [?:?] at java.lang.Thread.run(Thread.java:833) [?:?] [2023-07-19T11:55:56,785][WARN][o.e.x.s.a.RealmsAuthenticator] [xxxxx] Authentication to realm ldap1 failed - authenticate failed (Caused by LDAPException(resultCode=49 (invalid credentials), diagnosticMessage='80090308: LdapErr: DSID-0C090447, comment: AcceptSecurityContext error, data 52e, v3839', ldapSDKVersion=4.0.8, revision=28812)) ``` ---
**Author:** ![coezdemir](https://avatars.discourse-cdn.com/v4/letter/c/7c8e57/32.png) [@coezdemir](https://discuss.elastic.co/u/coezdemir)\ **Post date:** [July 21, 2023, 6:36am UTC](https://discuss.elastic.co/t/ldap-integration-not-working-as-expected/338921/2 "2023-07-21T06:36:54Z")
Hello, The error code 52e only returns when LDAP has a valid user name and wrong credentials. It seems like you are doing a bind maybe check the credentials for that user. Regards. ---
**Author:** ![forabraham1](https://avatars.discourse-cdn.com/v4/letter/f/7feea3/32.png) [@forabraham1](https://discuss.elastic.co/u/forabraham1)\ **Post date:** [July 21, 2023, 8:34am UTC](https://discuss.elastic.co/t/ldap-integration-not-working-as-expected/338921/3 "2023-07-21T08:34:34Z")
Hi, I got confirmation Admin team that the password being used for the bind account is valid. We've have even removed the Special character which was earlier. Any leads what is wrong and next things to check on this please. Thank you. ---
**Author:** ![forabraham1](https://avatars.discourse-cdn.com/v4/letter/f/7feea3/32.png) [@forabraham1](https://discuss.elastic.co/u/forabraham1)\ **Post date:** [July 24, 2023, 4:53am UTC](https://discuss.elastic.co/t/ldap-integration-not-working-as-expected/338921/4 "2023-07-24T04:53:59Z")
Can some one please help on the next steps, leads would be highly appreciated. Thank you ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [August 21, 2023, 4:54am UTC](https://discuss.elastic.co/t/ldap-integration-not-working-as-expected/338921/5 "2023-08-21T04:54:15Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.