Solved

LDAP open port connection for a cisco Unity to synch ports 636 and 3269

Posted on 2013-01-15
4
1,346 Views
Last Modified: 2013-01-16
Dear experts, I am in need to open some ports in my active directory server. I cannot connect using ports 3269,  686. I need those ports for an SSL connection to take effect between our Cisco Unity system and LDAP. Here is the result of an LDAP.exe tool from the server that needs a connection to:


Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 3269);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 686);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_sslinit(" 172.16.100.10", 636, 1);
Error 81 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
ld = cldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 389);
Established connection to  172.16.100.10.
Retrieving base DSA information...
Getting 1 entries:

here is when you try the same port 389 using SSL:

0x0 = ldap_unbind(ld);
ld = ldap_sslinit(" 172.16.100.10", 389, 1);
Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
 
So is SSL that it does not like...


For your time and expertise I thank you!
0
Comment
Question by:marceloNYC
  • 3
4 Comments
 
LVL 37

Accepted Solution

by:
ArneLovius earned 500 total points
ID: 38781290
You need a suitable certificate for LDAPS on 636

http://support.microsoft.com/kb/321051
0
 

Author Comment

by:marceloNYC
ID: 38782742
Yes, What happen was the domain controller or GC server died and we had to rebuild this new server. The certificate thing might be all messed up now... let me give this a try. Thanks!
0
 

Author Comment

by:marceloNYC
ID: 38784353
You don't happen to know how to fix the gray out or no access to manage a new certificate issue? I cannot move on forward until I can issue a new certificate template. cannot-add-new-certificate-templ.docx
 I am in step   8. Return to the Certificates or Certsrv console and in the details pane of Certificate Templates, right-click an open area of the console, click New, and then click Certificate Template to Issue.


http://social.technet.microsoft.com/wiki/contents/articles/2980.ldap-over-ssl-ldaps-certificate.aspx
0
 

Author Closing Comment

by:marceloNYC
ID: 38785334
Thanks!
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article shows how to deploy dynamic backgrounds to computers depending on the aspect ratio of display
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question