Troubleshooting LDAP integration issues in Puppet Enterprise

To troubleshoot LDAP integration issues in Puppet Enterprise such as login issues, point of failure issues, authentication issues with LDAP directory services, and issues with LDAP usernames that duplicate PE user accounts, get a debug-level console-services.log for RBAC in PE.

Version and installation information

PE version: All supported

Solution

Get a debug-level log for RBAC on the primary server in PE.

To get the log, follow these steps:

1. Edit /etc/puppetlabs/console-services/logback.xml, and uncomment this line:

   <!-- Uncomment to log ldap queries →
   
   <logger name="puppetlabs.rbac.ldap" level="DEBUG"/>

2. Restart pe-console-services.