asked on

Secure LDAP in 2003.

Hi,
we are planning to enable secure LDAP for my active directory infrastructure. We have all of our DCs running on 2003 servers in 32 bit platform.
Somebody telling me that 2003 is already running on secure LDAP and i m also able to connect thru LDP.exe to my domain on port 636. does it proves that secure LDAP is there ?

Please suggest on this..

Mike Kline

Yes if you connect over 636 you are using ldap over ssl

if you couldn't connect via port 636 you would get an error "can't connect or open" > not sure of the exact errror off the top of my head.

Thanks

Mike

Mike Kline

I should have googled first :)

http://www.expta.com/2009/11/how-to-test-ldap-over-ssl-connections.html >> the exact error if it wasn't working is "Cannot open connection,"

...and if you had isssues the AD team has a great blog entry http://blogs.technet.com/b/askds/archive/2008/03/13/troubleshooting-ldap-over-ssl.aspx

Thanks
Mike

pdixit1977

ASKER

BUT i m able to connect on both 389 adn 636 ports. what does that means ?

Mike Kline

you can use either (it is not one or the other)

port 389 is the default LDAP port.

pdixit1977

ASKER

but i dont want to connect over 389 (normal LDAP). how can i configure my domain controllers and apps so that they connect on Secure LDAP only ?

ASKER CERTIFIED SOLUTION

Mike Kline

membership

Create a free account to see this answer

Signing up is free and takes 30 seconds. No credit card required.

See answer

pdixit1977

ASKER

thanks mkline71. will wait for your suggestions on this.

Anybody else can advice on this..

pdixit1977

ASKER

thanks