Spectrum Oneclick LDAP - SPC-OCA-10494: Could not connect with the specified connection name/password. Packet Capture showing user password being used as bind password

Products

• Network Observability
• Spectrum

Issue/Introduction

We performed the following tests using test passwords to confirm what we see in Packet Capture:

Test Failed - Test Passwords used only for packet capture.
Bind Account being used - Password 12345
Test User set to Customer Account - Password 678910

Test Successful - Test Passwords used only for packet capture.
Bind Account being used - Password 12345
Test User set to Bind Account  - Password 12345

Packet Capture showing 

Cause

Whenever userBind is true (yes), connectionPassword is always set to the password passed into authenticate (the end-user’s password)

Resolution

Set userBind to false (no)

Additional Information

Packet Capture can only be used when customer is running LDAP (389) because traffic is unencrypted. This information will not seen if customer is running LDAP-S (636)