[Samba] Cisco ISE unable to retrieve AD group list from samba 4 server

Andreas Oster aoster at novanetwork.de
Tue Oct 22 03:30:10 MDT 2013

Am 03.10.2013 20:39, schrieb Jeremy Allison:
> On Thu, Oct 03, 2013 at 08:53:19AM +0200, Andreas Oster wrote:
>> Am 02.10.2013 21:53, schrieb Jeremy Allison:
>>> On Wed, Oct 02, 2013 at 11:38:21AM +0200, Andreas Oster wrote:
>>>> Hi all,
>>>> I have run into a problem with our samba4 setup. I have successfully
>>>> joined a Cisco ISE v1.1.4 (Identity Service Engine) test machine to the
>>>> samba4 AD. User authentication does work but unfortunately the ISE is
>>>> unable to fetch the AD groups from the domain controller. In the samba
>>>> logs I get the following error message when initiating the group fetch:
>>>> [2013/10/02 10:21:37.605554,  0]
>>>> ../source4/cldap_server/cldap_server.c:54(cldapd_request_handler)
>>>>   Invalid CLDAP request type 16 from ipv4:
>>> LDAP request type 16 == LDAP_TAG_AbandonRequest
>>> which we don't handle in the cldap request handler.
>>> That's why you're getting the error.
>>> Jeremy.
>> Hello Jeremy,
>> thank you very much for your fast response. Any chance that this
>> request type will be added ?
> I don't know what the CLDAP request is supposted to
> do (although I could look this up) - I'll let LDAP
> experts reply first.
> Jeremy.
Dear Jeremy,

unfortunately nobody has answered my question regarding the missing
cldaprequest type.

Is there someone special I could directly address this question to ?

Thank you for your kind help

best regards


More information about the samba mailing list