Solved

LDAP open port connection for a cisco Unity to synch ports 636 and 3269

Posted on 2013-01-15
4
1,362 Views
Last Modified: 2013-01-16
Dear experts, I am in need to open some ports in my active directory server. I cannot connect using ports 3269,  686. I need those ports for an SSL connection to take effect between our Cisco Unity system and LDAP. Here is the result of an LDAP.exe tool from the server that needs a connection to:


Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 3269);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 686);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_sslinit(" 172.16.100.10", 636, 1);
Error 81 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
ld = cldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 389);
Established connection to  172.16.100.10.
Retrieving base DSA information...
Getting 1 entries:

here is when you try the same port 389 using SSL:

0x0 = ldap_unbind(ld);
ld = ldap_sslinit(" 172.16.100.10", 389, 1);
Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
 
So is SSL that it does not like...


For your time and expertise I thank you!
0
Comment
Question by:marceloNYC
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 37

Accepted Solution

by:
ArneLovius earned 500 total points
ID: 38781290
You need a suitable certificate for LDAPS on 636

http://support.microsoft.com/kb/321051
0
 

Author Comment

by:marceloNYC
ID: 38782742
Yes, What happen was the domain controller or GC server died and we had to rebuild this new server. The certificate thing might be all messed up now... let me give this a try. Thanks!
0
 

Author Comment

by:marceloNYC
ID: 38784353
You don't happen to know how to fix the gray out or no access to manage a new certificate issue? I cannot move on forward until I can issue a new certificate template. cannot-add-new-certificate-templ.docx
 I am in step   8. Return to the Certificates or Certsrv console and in the details pane of Certificate Templates, right-click an open area of the console, click New, and then click Certificate Template to Issue.


http://social.technet.microsoft.com/wiki/contents/articles/2980.ldap-over-ssl-ldaps-certificate.aspx
0
 

Author Closing Comment

by:marceloNYC
ID: 38785334
Thanks!
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
A hard and fast method for reducing Active Directory Administrators members.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question