Error: Could not bind to the directory server when logging into Symantec VIP Manager

Products

• VIP Service

Issue/Introduction

Administrators attempting to log into the local VIP Manager IdP service may encounter authentication failures. VIP Manager IdP logs show error: "Could not bind to the directory server."

VIP Manager IdP is a local VIP Enterprise Gateway service that allows administrators to access VIP Manager Cloud account through a local Active Directory user for first factor credentials.

Environment

• VIP Enterprise Gateway
• VIP Manager IdP
• Active Directory

Cause

The 'VIP Administrator' User Store is unable to establish a secure LDAP bind with the directory server.

Resolution

Test the User Store Connection within the VIP Enterprise Gateway Console. If the test fails, perform the following steps:

1. Ensure the "Test User" still exists in Active Directory and qualifies for the 'User Filter'. Test a different user if possible that is known to be valid.
2. Ensure the Domain Controller connection is still valid and reachable by the VIP Enterprise Gateway
3. If the Domain Controller connection is utilizing SSL (port 636), then test a non-SSL connection on port 389
4. Ensure the "Bind User" account is still active and the password is correct in Active Directory

For detailed configuration steps, refer to KB 163791.

If the issue persists, contact Broadcom Support.