Description
Note, this article is applied to Spectrus DB Enterprise or Remote database.
Users may experience authentication failures when connecting to a remote database after LDAP/Active Directory changes. In this case, user logins to Spectrus DB failed while admin access remained available. Investigation showed the domain controller had begun requiring secure LDAP binding (SSL/TLS/signing), causing LDAP bind failures. Enabling secure authentication in the Enterprise Server configuration restored user access.
The issue can occur when changes are made to the organization's LDAP or Active Directory infrastructure, such as:
- LDAP signing being enabled or modified.
- Active Directory authentication policy updates.
- Changes to certificates used for LDAP communication.
- Other LDAP/AD security or configuration changes that affect authentication workflows.
Solution
The issue was resolved by updating the application's authentication configuration to match changes in the customer's LDAP/Active Directory environment.
Steps Performed
Prerequisites: Admin credentials for ESMC (Enterprise Server Manager Console) and access to the SpectrusDB server.
- Launch ESMC
- Navigate to <ACD>\SPECTRUSDB.SRV\ and run esmc.exe
- Connect to the database schema
- Connect as an admin user to the affected database schema
- Navigate to Scripted Actions
- Switch to the "Scripted Actions" panel in ESMC
- Open Authentication settings
- Right-click on the PostgreSQL (or Oracle) database node
- Select "Authentication"
- Verify current configuration
- Confirm that "Custom (Using Script)" is selected as the authentication type
- Note the selected scripted action in the "OnAuthenticate Script Action" drop-down
- Enable LDAP Signing
- In the Authentication Options dialog, toggle ON the LDAP Signing option
- This enables integrity checking on the LDAP connection, satisfying the domain controller's requirement
- Toggle OFF the Use SSL option
7. Test authentication
- Click "Check Authentication" (bottom-left of the dialog)
- Enter a valid username and password
- Confirm successful authentication
8. Click OK to save the settings
9. Verify with multiple users
- Have at least one additional user log in to confirm the fix works across accounts
Comments
0 comments
Article is closed for comments.