# Haproxy load balancing fail

**URL:** <https://discourse.haproxy.org/t/haproxy-load-balancing-fail/9333>\
**Category:** Help!\
**Created:** [December 17, 2023, 5:22pm UTC](https://discourse.haproxy.org/t/haproxy-load-balancing-fail/9333 "2023-12-17T17:22:33Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![nbanik](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/nbanik/32/1313_2.png) [@nbanik](https://discourse.haproxy.org/u/nbanik)\
**Post date:** [December 17, 2023, 5:22pm UTC](https://discourse.haproxy.org/t/haproxy-load-balancing-fail/9333/1 "2023-12-17T17:22:33Z")

</div>

Trying to config LDAP.

Haproxy version:

```auto
[root@gzp-qv-pprod-webapp1 haproxy]# /opt/haproxy/usr/local/sbin/haproxy -v         
HA-Proxy version 1.8.21 2019/08/16
Copyright 2000-2019 Willy Tarreau <willy@haproxy.org>

```

My config:

```auto
resolvers ldapdns
  nameserver dns1 172.16.6.91:53
  nameserver dns2 172.16.6.141:53
  nameserver dns3 172.16.1.51:53
  nameserver dns4 172.19.12.46:53
  accepted_payload_size 8192 # allow larger DNS payloads

listen bl-ldap
  bind 127.0.0.1:389
  mode tcp
  option ldap-check
  balance roundrobin
  server-template ldap 5 banglalinkgsm.com:389 check fall 1 rise 1 inter 60s resolvers ldapdns init-addr none

```

DNS gives 5 ldap servers.  
TCP dump shows ldap check success. But haproxy reports LDAP down:

```auto
bl-ldap,FRONTEND,,,0,0,3000,0,0,0,0,0,0,,,,,OPEN,,,,,,,,,1,14,0,,,,0,0,0,0,,,,,,,,,,,0,0,0,,,0,0,0,0,,,,,,,,,,,,,,,,,,,,,tcp,,0,0,0,,0,0,
bl-ldap,ldap1,0,0,0,0,,0,0,0,,0,,0,0,0,0,DOWN,1,1,0,1,2,402,402,,1,14,1,,0,,2,0,,0,L7RSP,,10,,,,,,,,,,,0,0,,,,,-1,Not LDAPv3 protocol,,0,0,0,0,,,,Layer7 invalid response,,1,1,0,,,,172.16.1.51:389,,tcp,,,,,,,,
bl-ldap,ldap2,0,0,0,0,,0,0,0,,0,,0,0,0,0,DOWN,1,1,0,1,2,401,401,,1,14,2,,0,,2,0,,0,L7RSP,,2,,,,,,,,,,,0,0,,,,,-1,Not LDAPv3 protocol,,0,0,0,0,,,,Layer7 invalid response,,1,1,0,,,,172.16.6.91:389,,tcp,,,,,,,,
bl-ldap,ldap3,0,0,0,0,,0,0,0,,0,,0,0,0,0,DOWN,1,1,0,1,2,400,400,,1,14,3,,0,,2,0,,0,L7RSP,,1,,,,,,,,,,,0,0,,,,,-1,Not LDAPv3 protocol,,0,0,0,0,,,,Layer7 invalid response,,1,1,0,,,,172.16.6.141:389,,tcp,,,,,,,,
bl-ldap,ldap4,0,0,0,0,,0,0,0,,0,,0,0,0,0,DOWN,1,1,0,1,2,399,399,,1,14,4,,0,,2,0,,0,L7RSP,,10,,,,,,,,,,,0,0,,,,,-1,Not LDAPv3 protocol,,0,0,0,0,,,,Layer7 invalid response,,1,1,0,,,,172.16.1.49:389,,tcp,,,,,,,,
bl-ldap,ldap5,0,0,0,0,,0,0,0,,0,,0,0,0,0,DOWN,1,1,0,1,2,397,397,,1,14,5,,0,,2,0,,0,L7RSP,,2,,,,,,,,,,,0,0,,,,,-1,Not LDAPv3 protocol,,0,0,0,0,,,,Layer7 invalid response,,1,1,0,,,,172.19.12.46:389,,tcp,,,,,,,,
bl-ldap,BACKEND,0,0,0,0,300,0,0,0,0,0,,0,0,0,0,DOWN,0,0,0,,2,397,397,,1,14,0,,0,,1,0,,0,,,,,,,,,,,,,,0,0,0,0,0,0,-1,,,0,0,0,0,,,,,,,,,,,,,,tcp,roundrobin,,,,,,,

```

TCP dump is attached.

 ![Capture](https://us1.discourse-cdn.com/flex016/uploads/haproxy/original/2X/8/8fd2a33680a4749274e004ede7b0bc81d7c4f246.png)

Please help

---

<div class="post-metadata">

**Author:** ![nbanik](https://sea2.discourse-cdn.com/flex016/user_avatar/discourse.haproxy.org/nbanik/32/1313_2.png) [@nbanik](https://discourse.haproxy.org/u/nbanik)\
**Post date:** [December 17, 2023, 5:33pm UTC](https://discourse.haproxy.org/t/haproxy-load-balancing-fail/9333/2 "2023-12-17T17:33:11Z")

</div>

fixed in

[ldap-check does not work against Active Directory · Issue #1390 · haproxy/haproxy · GitHub](https://github.com/haproxy/haproxy/issues/1390)