How To Fix SLDAP_ICM111 - LDAP Server &1 is configured for SASL Bind (External)

SAP Error Message - Details

• Message type: E = Error

• Message class: SLDAP_ICM - ICM LDAP Plugin: Messages

• Message number: 111

• Message text: LDAP Server &1 is configured for SASL Bind (External)

What causes this issue?

The LDAP server is configured to use SASL EXTERNAL Bind.
You try to access it using user name and password, which is not
possible.

System Response

The system issues an error message and will not allow you to continue with this transaction until the error is resolved.

How to fix this error?

You can use username and password instead of the configured system user
only when SASL EXTERNAL Bind is not chosen as authentication mechanism.

Procedure for System Administrators

Error message extract from SAP system. Copyright SAP SE.

Smart SAP Assistant

• What is the cause and solution for SAP error message SLDAP_ICM111 - LDAP Server &1 is configured for SASL Bind (External) ?

  The SAP error message SLDAP_ICM111 indicates that the LDAP server configured in your SAP system is set up to use SASL (Simple Authentication and Security Layer) for binding, but the necessary configuration or credentials for this type of authentication are not properly set up or are missing.
  Cause:
  
  SASL Configuration: The LDAP server is configured to require SASL authentication, but the SAP system is not set up to handle this type of authentication.
  Missing Credentials: The credentials required for SASL binding may not be provided or may be incorrect.
  Configuration Mismatch: There may be a mismatch between the SAP system's LDAP configuration and the LDAP server's requirements.
  Network Issues: There could be network issues preventing the SAP system from reaching the LDAP server.
  
  Solution:
  
  
  Check LDAP Configuration:
  
  Go to the SAP system and check the LDAP configuration settings. You can do this in transaction LDAP or SICF.
  Ensure that the LDAP server settings are correct, including the server address, port, and base DN.
  
  
  
  SASL Authentication Setup:
  
  If SASL is required, ensure that the SAP system is configured to support SASL authentication. This may involve setting up the appropriate SASL libraries and configurations on the SAP server.
  Verify that the necessary SASL mechanisms (like GSSAPI, DIGEST-MD5, etc.) are installed and configured correctly.
  
  
  
  Credentials:
  
  Ensure that the correct credentials (username and password) are provided for the SASL bind. This may involve checking the user account settings in the LDAP server.
  If using Kerberos for SASL, ensure that the Kerberos configuration is correct and that the SAP system can obtain a valid Kerberos ticket.
  
  
  
  Test Connectivity:
  
  Use tools like ldapsearch or similar to test the connection to the LDAP server from the SAP system. This can help identify if there are any network issues or misconfigurations.
  
  
  
  Review Logs:
  
  Check the SAP system logs (transaction SM21) and the LDAP server logs for any additional error messages that might provide more context on the issue.
  
  
  
  Documentation and Support:
  
  Refer to the SAP documentation for LDAP integration and SASL authentication for specific configuration steps.
  If the issue persists, consider reaching out to SAP support for further assistance.
  
  
  
  Related Information:
  
  SASL Mechanisms: Familiarize yourself with the different SASL mechanisms supported by your LDAP server and ensure that the SAP system is configured to use one of them.
  LDAP Version: Ensure that the version of the LDAP server is compatible with the SAP system.
  Security Considerations: When configuring LDAP and SASL, consider the security implications and ensure that sensitive information is handled appropriately.
  
  By following these steps, you should be able to resolve the SLDAP_ICM111 error and successfully configure your SAP system to communicate with the LDAP server using SASL binding.