diff --git a/content/post/2017-11.md b/content/post/2017-11.md
index ff4eecae3..0d918811c 100644
--- a/content/post/2017-11.md
+++ b/content/post/2017-11.md
@@ -748,3 +748,11 @@ $ grep -c com.atmire.utils.UpdateSolrStatsMetadata dspace.log.2017-11-19
 - I found [an article about JVM tuning](https://www.cakesolutions.net/teamblogs/low-pause-gc-on-the-jvm) that gives some pointers how to enable logging and tools to analyze logs for you
 - Also notes on [rotating GC logs](https://blog.gceasy.io/2016/11/15/rotating-gc-log-files/)
 - I decided to switch DSpace Test back to the CMS garbage collector because it is designed for low pauses and high throughput (like G1GC!) and because we haven't even tried to monitor or tune it
+
+## 2017-11-21
+
+- Magdalena was having problems logging in via LDAP and it seems to be a problem with the CGIAR LDAP server:
+
+```
+2017-11-21 11:11:09,621 WARN  org.dspace.authenticate.LDAPAuthentication @ anonymous:session_id=2FEC0E5286C17B6694567FFD77C3171C:ip_addr=77.241.141.58:ldap_authentication:type=failed_auth javax.naming.CommunicationException\colon; simple bind failed\colon; svcgroot2.cgiarad.org\colon;3269 [Root exception is javax.net.ssl.SSLHandshakeException\colon; sun.security.validator.ValidatorException\colon; PKIX path validation failed\colon; java.security.cert.CertPathValidatorException\colon; validity check failed]
+```
diff --git a/public/2017-11/index.html b/public/2017-11/index.html
index dd4515d1e..3ddb9169a 100644
--- a/public/2017-11/index.html
+++ b/public/2017-11/index.html
@@ -86,7 +86,7 @@ COPY 54701
   "@type": "BlogPosting",
   "headline": "November, 2017",
   "url": "https://alanorth.github.io/cgspace-notes/2017-11/",
-  "wordCount": "4391",
+  "wordCount": "4436",
   "datePublished": "2017-11-02T09:37:54+02:00",
   "dateModified": "2017-11-20T15:56:01+02:00",
   "author": {
@@ -989,6 +989,15 @@ $ grep -c com.atmire.utils.UpdateSolrStatsMetadata dspace.log.2017-11-19
 <li>I decided to switch DSpace Test back to the CMS garbage collector because it is designed for low pauses and high throughput (like G1GC!) and because we haven&rsquo;t even tried to monitor or tune it</li>
 </ul>
 
+<h2 id="2017-11-21">2017-11-21</h2>
+
+<ul>
+<li>Magdalena was having problems logging in via LDAP and it seems to be a problem with the CGIAR LDAP server:</li>
+</ul>
+
+<pre><code>2017-11-21 11:11:09,621 WARN  org.dspace.authenticate.LDAPAuthentication @ anonymous:session_id=2FEC0E5286C17B6694567FFD77C3171C:ip_addr=77.241.141.58:ldap_authentication:type=failed_auth javax.naming.CommunicationException\colon; simple bind failed\colon; svcgroot2.cgiarad.org\colon;3269 [Root exception is javax.net.ssl.SSLHandshakeException\colon; sun.security.validator.ValidatorException\colon; PKIX path validation failed\colon; java.security.cert.CertPathValidatorException\colon; validity check failed]
+</code></pre>
+