Hello Rob,
Thank you for the reply.
I got the logs, as you commeted.
=========
access log
[18/Jan/2024:23:34:13.087718471 +0000] conn=788 fd=258 slot=258 connection from
52.78.30.18 to 34.84.136.11
[18/Jan/2024:23:34:13.088018506 +0000] conn=788 op=0 EXT
oid="1.3.6.1.4.1.1466.20037" name="start_tls_plugin"
[18/Jan/2024:23:34:13.088053934 +0000] conn=788 op=0 RESULT err=0 tag=120 nentries=0
wtime=0.000228592 optime=0.000040018 etime=0.000268106
[18/Jan/2024:23:34:13.158931686 +0000] conn=788 TLS1.3 128-bit AES-GCM
[18/Jan/2024:23:34:13.159223459 +0000] conn=788 op=-1 fd=258 Disconnect - Bad Ber Tag or
uncleanly closed connection - B1
security log
{ "date": "[18\/Jan\/2024:23:34:13.159227408 +0000] ",
"utc_time": "1705620853.159227408", "event":
"TCP_ERROR", "client_ip": "52.78.30.18",
"server_ip": "34.84.136.11", "ldap_version": 3,
"conn_id": 788, "msg": "Bad Ber Tag or uncleanly closed
connection - B1" }
=========
I'm using automember to automatically join new hosts to a specific hostgroup.
0.5K ~ 1K hosts is too many to join one hostgroup?
JHK