Skip to main content
anatol_ro
anatol_ro
New Member
May 2, 2024
Solved

Status of remote server (LDAP) has been reset to offline-stale message constantly appearing in log

  • May 2, 2024
  • 2 replies
  • 1978 views

Hello everyone! The following messages appear in the logs in the FortiAuthenticator every minute. That is, the FortiAuthenticator both loses and finds the remote LDAP server again.

 

Снимок экрана 2024-05-02 101957.png

Please, tell me why this may occur. In the FortiAuthenticator CLI, diagnose netlink arp list, I see that the mac-address of  my ldap server is either in the STALE state or in the REACHEBLE state.

 

 Could there be a problem with arp?
Thanks

Best answer by AEK

Hi Anatol

There is a known issue like yours that was fixed in 6.4.7 and 6.5.0.

848324

Remote LDAP server constantly becomes offline-stale.

Can you confirm your version is prior to that ones.

2 replies

AEK
SuperUser
AEK
SuperUser
May 2, 2024

Hi Anatol

Stale state should mean there was no communication betwenn LDAP and FAC for a while.

Is LDAP server on the same subnet as FAC?

Can you try a continuous ping from FAC to LDAP and see if there are packet loss when the issue occurs?

AEK
anatol_ro
anatol_roAuthor
New Member
May 3, 2024

Hi AEK! Thank you for your feedback. LDAP server and FAC are on different subnets with routing between them.
I start continuous ping from FAC to LDAP and packets are not lost for a long time, but at the same time messages "Status of remote server (LDAP) has been reset to offline-stale" and "Remote server (LDAP) become available" appear in the logs.

AEK
SuperUser
AEKAnswer
SuperUser
May 3, 2024

Hi Anatol

There is a known issue like yours that was fixed in 6.4.7 and 6.5.0.

848324

Remote LDAP server constantly becomes offline-stale.

Can you confirm your version is prior to that ones.

AEK
anatol_ro
anatol_roAuthor
New Member
May 3, 2024

So, my version is v6.4.4, build1028. I will try to update it in the near future. Thank you!

Terms & ConditionsAccessibility statement