This section describes messages output by the LDAP linkage functionality of Cosminexus HTTP Server.

---

[client client-address] An attempt to bind user user-ID to the LDAP server failed: detailed-information

An attempt to perform user authentication in the LDAP server has failed. Possible reasons for the failure are as follows:

• An invalid user name or password is specified.
• An error occurred when encoding (BER-encoding) the user name and password.
• The LDAP server could not receive a request, or the connection to the LDAP server was disconnected.
• The memory is insufficient.
• An error occurred when acquiring the processing results returned from the LDAP server.
• An error occurred when decoding the encoded processing results.

Take action against the error according to detailed-information.

Error level: error

(S) If the user information is not found on the LDAP server (if Invalid credentials or No such object is output in the details), the processing is interrupted with status code 401 Authorization Required. For other errors, the processing is interrupted with status code 500 Internal Server Error.

(O) Based on detailed-information, make sure that no problem exists in the user information registered in the LDAP server, or the entered user information.

---

[client client-address] An attempt to initialize the LDAP server session failed.

An attempt to initialize an LDAP server session has failed.

Error level: error

(S) The processing will be interrupted by returning the status code 500 Internal Server Error.

(O) Check to make sure that no mistakes exist in the LDAPServerName or LDAPServerPort directive.

---

[client client-address] An attempt to terminate the LDAP server session failed.

An attempt to terminate an LDAP server session has failed.

Error level: error

(S) The process continues.

(O) If this error occurs frequently due to the failure to release the resources for accessing the LDAP server, restart Cosminexus HTTP Server.

---

[client client-address] An LDAP search for user user-ID failed: detailed-information

The user information was searched according to the search filter, but the search could not be completed due to the occurrence of an error. The details of the error are described in detailed-information. Possible reasons for the failure are as follows:

• An invalid search folder was specified.
• An error occurred when encoding the search filter.
• A problem occurred in the communication path with the LDAP server.
• An attempt to allocate memory has failed.
• An error was found in the processing results returned from the LDAP server.
• The encoded processing results searched with the search filter could not be decoded.
• The LDAP protocol version is different.
• An error occurred when analyzing and encoding the search filter.
• The search processing surpassed the limitation time.
• The user information could not be found in the LDAP server.

Revise according to detailed-information because of causes other than the above.

Error level: error

(S) When the user information is not found in the LDAP server, the processing will be interrupted with the status code 401 Authorization Required. For other errors, the processing will be interrupted with the status code 500 Internal Server Error.

(O) Revise according to the cause described in detailed-information.

---

[client client-address] Authentication failed

The password is not entered, the user name exceeds 255 characters, or the user name could not be acquired.

Error level: error

(S) The processing will be interrupted with the status code 401 Authorization Required.

(O) Enter the correct user name and password.

---

[client client-address] The first entry could not be acquired.

The authentication was successful, but the entry could not be acquired.

Error level: error

(S) The processing will be interrupted with the status code 500 Internal Server Error.

(O) Make sure that no problems exist in the schema of the LDAP server.

---

[client client-address] The invalid DN DN-value was found in LDAPBaseDN.

An invalid DN is specified in the LDAPBaseDN directive.

Error level: error

(S) The processing will be interrupted with the status code 500 Internal Server Error.

(O) Revise the correspondence between the LDAPServerName directive and LDAPServerPort directive.

---

[client client-address] The invalid LDAP server LDAP-server-name was found in LDAPServerName.

An invalid LDAP server name is specified in the LDAPServerName directive.

Error level: error

(S) The processing will be interrupted with the status code 500 Internal Server Error.

(O) Revise the correspondence between the LDAPServerPort directive and LDAPBaseDN directive.

---

[client client-address] The invalid port number port-number was found in LDAPServerPort.

An invalid port number is specified in the LDAPServerPort directive.

Error level: error

(S) The processing will be interrupted with the status code 500 Internal Server Error.

(O) Revise the correspondence between the LDAPServerName directive and LDAPBaseDN directive.

---

[client client-address] The session option option could not be set.

An attempt to set up the session options has failed.

• When the option to be specified is DEREF
  Settings are specified in such a way so that functionality with an optional name is not used during the processing of the search filter of the LDAPRequire directive, but a failure has occurred.
  
• When the option to be specified is PROTOCOL_VERSION
  An attempt to set up the protocol version for accessing the LDAP server has failed.
  
• When the option to be specified is REFERRALS
  Settings are specified in such a way so that the client does not follow the referral, but a failure has occurred.
  

Error level: error

(S) The processing will be interrupted with the status code 500 Internal Server Error.

(O) Make sure that the Hitachi directory server V2 is specified in the LDAPServerName directive.

---

[client client-address] The user user-ID lacks LDAPRequire filter permission.

No match was found to the search filter specified in the LDAPRequire directive.

Error level: error

(S) When Authorization is specified in the LDAPNoEntryStatus directive, the processing will be interrupted with the status code 401 Authorization Required. When Forbidden is specified in the LDAPNoEntryStatus directive, the processing will be interrupted with the status code 403 Forbidden.

(O) If a problem exists, revise the search filter again.

---

[client client-address] The value of attribute attribute could not be acquired: detailed-information

An attempt to acquire the attribute values has failed.

Error level: error

(S) The process continues. If an attribute whose string value could not be acquired is specified in the LDAPSetEnv directive, the environment variable in which that attribute value is attempted to be specified will not be set up.

(O) Revise according to the cause described in detailed-information.

---

LDAP: A separator (%) could not be found.

The separator (%) of the DN attribute specified in the LDAPRequire directive does not exist.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the DN attribute, and then restart Cosminexus HTTP Server.

---

LDAP: No DN was specified for LDAPBaseDN.

The DN value is not specified in the LDAPBaseDN directive.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the DN value, and then restart Cosminexus HTTP Server.

---

LDAP: No IP address or hostname was specified for LDAPServerName.

The host name or IP address is not specified in the LDAPServerName directive.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the LDAPServerName directive, and then restart Cosminexus HTTP Server.

---

LDAP: No port number was specified for LDAPServerPort.

The port number is not specified in the LDAPServerPort directive.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the LDAPServerPort directive, and then restart Cosminexus HTTP Server.

---

LDAP: The specified DN is invalid.

The value specified in the LDAPBaseDN directive is not correct.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the LDAPBaseDN directive, and then restart Cosminexus HTTP Server.

---

LDAP: The specified IP address is invalid.

The IP address specified in the LDAPServerName directive is invalid.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the IP address, and then restart Cosminexus HTTP Server.

---

LDAP: The specified LDAPRequire value is invalid.

The value specified in the LDAPRequire directive is not correct.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the LDAPRequire directive, and then restart Cosminexus HTTP Server.

---

LDAP: The specified LDAPTimeout exceeds the maximum limit, and has been changed to 86400 seconds.

The maximum wait time (unit: seconds) of the search processing specified in the LDAPTimeout directive has exceeded the maximum value. 86400 seconds will be specified.

Error level: warn

(S) The process continues.

(O) Revise the maximum wait time of the filter search processing.

---

LDAP: The specified port number is invalid.

The port number specified in the LDAPServerPort directive contains characters other than numerals.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the port number, and then restart Cosminexus HTTP Server.

---

LDAP: The specified port number is out of range (range = 1 to 65535).

The port number specified in the LDAPServerPort directive is outside the range.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the port number, and then restart Cosminexus HTTP Server.

---

LDAP: The specified timeout is invalid.

The maximum wait time (unit: seconds) of the filter search processing specified in the LDAPTimeout directive contains characters other than numerals.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the maximum wait time of the filter search processing, and then restart Cosminexus HTTP Server.

---

LDAP: The specified timeout is out of range (range = 1 to 86400).

The maximum wait time (unit: seconds) of the filter search processing specified in the LDAPTimeout directive is outside the range.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the maximum wait time of the filter search processing, and then restart Cosminexus HTTP Server.

---

LDAP: The status code specified in LDAPNoEntryStatus is invalid.

The value specified in the LDAPNoEntryStatus directive is not correct.

Error level: None

(S) The startup of Cosminexus HTTP Server will be interrupted.

(O) Correctly specify the LDAPNoEntryStatus directive, and then restart Cosminexus HTTP Server.