Solved

LDAP open port connection for a cisco Unity to synch ports 636 and 3269

Posted on 2013-01-15
4
1,312 Views
Last Modified: 2013-01-16
Dear experts, I am in need to open some ports in my active directory server. I cannot connect using ports 3269,  686. I need those ports for an SSL connection to take effect between our Cisco Unity system and LDAP. Here is the result of an LDAP.exe tool from the server that needs a connection to:


Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 3269);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 686);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_sslinit(" 172.16.100.10", 636, 1);
Error 81 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
ld = cldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 636);
Error <0x51>: Fail to connect to  172.16.100.10.
ld = ldap_open(" 172.16.100.10", 389);
Established connection to  172.16.100.10.
Retrieving base DSA information...
Getting 1 entries:

here is when you try the same port 389 using SSL:

0x0 = ldap_unbind(ld);
ld = ldap_sslinit(" 172.16.100.10", 389, 1);
Error 0 = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, 3);
Error 81 = ldap_connect(hLdap, NULL);
Server error: <empty>
Error <0x51>: Fail to connect to  172.16.100.10.
 
So is SSL that it does not like...


For your time and expertise I thank you!
0
Comment
Question by:marceloNYC
  • 3
4 Comments
 
LVL 36

Accepted Solution

by:
ArneLovius earned 500 total points
ID: 38781290
You need a suitable certificate for LDAPS on 636

http://support.microsoft.com/kb/321051
0
 

Author Comment

by:marceloNYC
ID: 38782742
Yes, What happen was the domain controller or GC server died and we had to rebuild this new server. The certificate thing might be all messed up now... let me give this a try. Thanks!
0
 

Author Comment

by:marceloNYC
ID: 38784353
You don't happen to know how to fix the gray out or no access to manage a new certificate issue? I cannot move on forward until I can issue a new certificate template. cannot-add-new-certificate-templ.docx
 I am in step   8. Return to the Certificates or Certsrv console and in the details pane of Certificate Templates, right-click an open area of the console, click New, and then click Certificate Template to Issue.


http://social.technet.microsoft.com/wiki/contents/articles/2980.ldap-over-ssl-ldaps-certificate.aspx
0
 

Author Closing Comment

by:marceloNYC
ID: 38785334
Thanks!
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now