?
Solved

LDAP open port connection for a cisco Unity to synch ports 636 and 3269

Posted on 2013-01-15
4
Medium Priority
?
1,396 Views
Last Modified: 2013-01-16
Dear experts, I am in need to open some ports in my active directory server. I cannot connect using ports 3269,  686. I need those ports for an SSL connection to take effect between our Cisco Unity system and LDAP. Here is the result of an LDAP.exe tool from the server that needs a connection to:


Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 3269);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 686);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_sslinit(" 172.16.100.10", 636, 1);
Error 81 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
ld = cldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 389);
Established connection to  172.16.100.10.
Retrieving base DSA information...
Getting 1 entries:

here is when you try the same port 389 using SSL:

0x0 = ldap_unbind(ld);
ld = ldap_sslinit(" 172.16.100.10", 389, 1);
Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
 
So is SSL that it does not like...


For your time and expertise I thank you!
0
Comment
Question by:marceloNYC
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 37

Accepted Solution

by:
ArneLovius earned 2000 total points
ID: 38781290
You need a suitable certificate for LDAPS on 636

http://support.microsoft.com/kb/321051
0
 

Author Comment

by:marceloNYC
ID: 38782742
Yes, What happen was the domain controller or GC server died and we had to rebuild this new server. The certificate thing might be all messed up now... let me give this a try. Thanks!
0
 

Author Comment

by:marceloNYC
ID: 38784353
You don't happen to know how to fix the gray out or no access to manage a new certificate issue? I cannot move on forward until I can issue a new certificate template. cannot-add-new-certificate-templ.docx
 I am in step   8. Return to the Certificates or Certsrv console and in the details pane of Certificate Templates, right-click an open area of the console, click New, and then click Certificate Template to Issue.


http://social.technet.microsoft.com/wiki/contents/articles/2980.ldap-over-ssl-ldaps-certificate.aspx
0
 

Author Closing Comment

by:marceloNYC
ID: 38785334
Thanks!
0

Featured Post

Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question