Unable to login with LDAP identity (with Active Directory) provider in OCP 3.11

Solution Unverified - Updated -

Issue

  • Unable to login with LDAP identity provider in OCP 3.11. It was working fine with OCP 3.10.34. But in 3.11, we need to pass in CA certificate for LDAP bz 1627764. We did that but when I try with 'oc login', I am getting 'Error from server (InternalError): Internal error occurred: unexpected response: 500'

    E1023 21:20:30.261942       1 ldap.go:93] error binding to GID=00000001,OU=Employee,OU=People,O=Org,C=US for search phase: unable to read LDAP response packet: local error: tls: bad record MAC
E1023 21:20:30.262109       1 login.go:174] Error authenticating "USER1" with provider "LDAP": unable to read LDAP response packet: local error: tls: bad record MAC

Environment

  • Red Hat OpenShift Container Platform
    • 3.11

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content