Configuring LDAP over SSL using port 636 Not working

[Ajil]

Dear Team,

We have verified that Active Directory / LDAP connectivity is working successfully from DCE when using LDAP port 389 without enabling the SSL option.

However, when configuring LDAP over SSL using port 636 and enabling the SSL checkbox, DCE is unable to connect to the AD/LDAP server.

Current status:

• LDAP (Port 389): Working
• LDAPS (Port 636): Connection unsuccessful from DCE

Please investigate and advise.

[APC_Steve]

Hello @Ajil ,

You'll need to install the AD server's SSL cert into the server certificates page of Data Center Expert. There is some mention of that here:
https://www.se.com/us/en/faqs/FA158395/
If it works on the default port without SSL then this would be the most likely reason i twould fail. Either you didn't install the cert into DCE or there is an issue with that cert.

This is a command example that using your server name, should get all necessary certs to add to the DCE server certs config.
openssl s_client -showcerts -connect your.adserver.com:636 < /dev/null

Thanks,

Steve