LDAP connection does not work in Aria Operations for Logs (formerly vRealize Log Insight)

Products

• VMware Aria Suite

Issue/Introduction

• Unable to authenticate to Active Directory.
• You see the error:
  "Unable to validate Active Directory credentials. Please check your Active Directory DNS name, port, and SSL settings as well as your username and password."
• Kerberos is enabled on Active Directory
• Same configuration used in Aria Operations (formerly vRealize Operations) or other Aria Suite products instance works.

Environment

VMware vRealize Log Insight 3.6.x
VMware vRealize Log Insight 3.3.x
VMware vRealize Log Insight 4.0.x
VMware Aria Operations for Logs 8.x

Cause

This issue occurs if TCP/88 and UDP/88 ports are not open.

Resolution

To resolve this issue, ensure that TCP/88 and UDP/88 ports are open to interact with Kerberos. For more information, see the Microsoft TechNet article Port Assignments for Well-Known Ports.

Disclaimer: VMware is not responsible for the reliability of any data, opinions, advice, or statements made on third-party websites. Inclusion of such links does not imply that VMware endorses, recommends, or accepts any responsibility for the content of such sites.