Hello Rob, Thank you for the reply. I got the logs, as you commeted. ========= access log [18/Jan/2024:23:34:13.087718471 +0000] conn=788 fd=258 slot=258 connection from 52.78.30.18 to 34.84.136.11 [18/Jan/2024:23:34:13.088018506 +0000] conn=788 op=0 EXT oid="1.3.6.1.4.1.1466.20037" name="start_tls_plugin" [18/Jan/2024:23:34:13.088053934 +0000] conn=788 op=0 RESULT err=0 tag=120 nentries=0 wtime=0.000228592 optime=0.000040018 etime=0.000268106 [18/Jan/2024:23:34:13.158931686 +0000] conn=788 TLS1.3 128-bit AES-GCM [18/Jan/2024:23:34:13.159223459 +0000] conn=788 op=-1 fd=258 Disconnect - Bad Ber Tag or uncleanly closed connection - B1
security log { "date": "[18/Jan/2024:23:34:13.159227408 +0000] ", "utc_time": "1705620853.159227408", "event": "TCP_ERROR", "client_ip": "52.78.30.18", "server_ip": "34.84.136.11", "ldap_version": 3, "conn_id": 788, "msg": "Bad Ber Tag or uncleanly closed connection - B1" } =========
I'm using automember to automatically join new hosts to a specific hostgroup. 0.5K ~ 1K hosts is too many to join one hostgroup?
JHK