Troubleshooting LDAP authentication

This topic describes error log messages that can arise when LDAPVerifyServerSSLCert=T in the tm1s.cfg file.

The following message indicates that the certificate does not match any of the names that are listed inLDAPVerifyCertServerName. Verify the certificate name and ensure that it has a LDAPVerifyCertServerName entry in the tm1s.cfg file.
LDAP ERROR: 0x800b0109 - Error verifying server certificate chain validity
LDAP ERROR: Error verifying server certificate no match for <server>
LDAP ERROR: 0x51 - ldap_connect failed.
The following message indicates an issue with the trust of the LDAP server certificate by Microsoft Windows. Ensure that the certificate has been imported into the Microsoft Windows Certificate Store.
LDAP ERROR: 0x800b010f - Error verifying server certificate chain validity
LDAP ERROR: Error verifying server certificate no match for <server>
LDAP ERROR: 0x51  - ldap_connect failed.
The following message indicates that either the certificate is revoked or TM1® is looking for the CRL certificate but cannot find it in the Microsoft Windows Certificate Store. To correct the error, skip the CRL check (set LDAPSkipSSLCRLVerification=T) or import the CRL certificate from the CA into the Microsoft Windows Certificate Store.
LDAP ERROR: 0x80092012 - Error verifying server certificate chain validity
LDAP ERROR: Error verifying server certificate no match for <server>
LDAP ERROR: 0x51 - ldap_connect failed.
Parent topic: LDAP Authentication