Solved

LDAP open port connection for a cisco Unity to synch ports 636 and 3269

Posted on 2013-01-15
4
1,354 Views
Last Modified: 2013-01-16
Dear experts, I am in need to open some ports in my active directory server. I cannot connect using ports 3269,  686. I need those ports for an SSL connection to take effect between our Cisco Unity system and LDAP. Here is the result of an LDAP.exe tool from the server that needs a connection to:


Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 3269);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 686);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_sslinit(" 172.16.100.10", 636, 1);
Error 81 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
ld = cldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 389);
Established connection to  172.16.100.10.
Retrieving base DSA information...
Getting 1 entries:

here is when you try the same port 389 using SSL:

0x0 = ldap_unbind(ld);
ld = ldap_sslinit(" 172.16.100.10", 389, 1);
Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
 
So is SSL that it does not like...


For your time and expertise I thank you!
0
Comment
Question by:marceloNYC
  • 3
4 Comments
 
LVL 37

Accepted Solution

by:
ArneLovius earned 500 total points
ID: 38781290
You need a suitable certificate for LDAPS on 636

http://support.microsoft.com/kb/321051
0
 

Author Comment

by:marceloNYC
ID: 38782742
Yes, What happen was the domain controller or GC server died and we had to rebuild this new server. The certificate thing might be all messed up now... let me give this a try. Thanks!
0
 

Author Comment

by:marceloNYC
ID: 38784353
You don't happen to know how to fix the gray out or no access to manage a new certificate issue? I cannot move on forward until I can issue a new certificate template. cannot-add-new-certificate-templ.docx
 I am in step   8. Return to the Certificates or Certsrv console and in the details pane of Certificate Templates, right-click an open area of the console, click New, and then click Certificate Template to Issue.


http://social.technet.microsoft.com/wiki/contents/articles/2980.ldap-over-ssl-ldaps-certificate.aspx
0
 

Author Closing Comment

by:marceloNYC
ID: 38785334
Thanks!
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question