Skip to main content
cancel
Showing results for 
Search instead for 
Did you mean: 
njohnson1
Contributor
Contributor

Setting User Directory Connector to Google LDAP

Hello, I am trying to setup a Generic LDAP UDC to our Google Workspace domain using the Google LDAP server. The setup process seems to fail because of a timeout but I can connect and browse through the LDAP server using Softerra LDAP Administrator. The certificate from Google is installed in my user's certificate store, the service user's certificate store, and in the local machine certificate store. The firewall is disabled. Running on Windows Server 2022.

From the Repository\Trace\UserManagement_Repository log:
"Fetching directoryentry LDAP://ldap.google.com:636 failed: This operation returned because the timeout period expired.
Setting up UDC of type Repository.UserDirectoryConnectors.LDAP.GenericLDAP unsuccessful Setting up connection to LDAP root node failed. Check log file."

From the Proxy\Trace\System_Proxy log:
"Failed to authenticate stream as Server An unknown error occurred while processing the certificate↵↓A call to SSPI failed, see inner exception. NO-STACKTRACE
Above happened because: An unknown error occurred while processing the certificate NO-STACKTRACE
Unanticipated System.Security.Authentication.AuthenticationException occurred accepting client, disposing connection attempt"

Labels (2)
2 Replies
Maria_Halley
Support
Support

@njohnson1 

If you are not already, try using Advanced LDAP. 

njohnson1
Contributor
Contributor
Author

Advanced LDAP did not work either. I "resolved" the issue by setting the path to ldaps://ldap.google.com:636, but after that had issues with pulling in the user's display name and then actually authenticating. Eventually gave up and set up SAML auth, following this guide: https://community.qlik.com/t5/Official-Support-Articles/Google-Workspace-formerly-known-as-G-Suite-a...