Active Directory over LDAP - Encoding Error (code 83)

[joshua_soriano]

I seem to successfully added (Active Directory over LDAP) Identity source to authenticate with another domain just as the same configuration with other vCenters we have, but upon adding permission from another domain, I get this return error from LDAP error 83 upon searching users/groups from this new identity source.

According to LDAP error code documentation:

"client-side result code Indicates that the LDAP client encountered errors when encoding an LDAP request intended for the LDAP server."

But I am not sure if I have to employ the LDAPS instead, since I used to do this with other vCenters that does not have this issue.

There seems to be limited information out there about this error code from LDAP so would need some input if anyone has experienced this?

WARN  

com.vmware.identity.interop.ldap.LdapErrorChecker] Error received by LDAP client: com.vmware.identity.interop.ldap.WinLdapClientLibrary, error code: 83

ERROR

com.vmware.identity.idm.server.provider.PooledLdapConnectionFactory] com.vmware.identity.interop.ldap.EncodingErrorLdapException: Encoding Error

LDAP error [code: 83]

[kenobi79]

Hi 

i think is a problem regarding the bind on AD

Check if the bind user on the AD is correct, and the port of connection... if you use LDAP the port is 389, if you use LDAPS the port 636

Verify the FW rules also

i take the info on error code (83) on https://cdn.nsoftware.com/help/legacy/sbb/ref_err_ldaperrorcodes.html