EasySSO NTLM domain.netbios.name failure to locate Domain Controller records

Question

I am pressing Test Connection in EasySSO NTLM Authenticator and getting this message.

Why is this showing up and how can I fix this? 

Error testing account abcd$

jespa.security.SecurityProviderException: Failed to retrieve property: domain.netbios.name

Caused by:

jespa.security.SecurityProviderException: Failed to locate authority for name: mydomain.org

Answer

EasySSO uses DNS to lookup Domain Controllers. The DNS servers are defined by the Operating System where Atlassian application is running on.

Given domain "mydomain.org" EasySSO will be looking for this SRV record in the DNS:

_ldap._tcp.dc._msdcs.mydomain.org

If you are using AD Site additional parameter with value "ABC" the SRV record being looked up in the DNS will be:

_ldap._tcp.ABC._sites.dc._msdcs.mydomain.org

This error signifies that DNS servers the host OS is pointing to do not contain these SRV records.

You can override the servers via Additional Parameters in Advanced Configuration, but it would be better to have the infrastructure correctly configured.

jespa.dns.servers=192.168.0.1,192.168.0.2

It is also possible to supply a text file completely overriding DNS information. See Jespa Operators Manual available for download from EasySSO configuration screen, page 6.

See other solutions

Please review our NTLM Configuring Troubleshooting FAQs.