Solved

TomCat Service cannot authenticate from DMZ to AD to start TomCat Service 2008R2

Posted on 2014-02-06
4
291 Views
Last Modified: 2014-02-15
Hi Folks,

Have a Winodws 2008R2 box in the DMZ we run Tomcat on it and it starts its service with AD Account Credentials.

What ports do I need to make this happen:

DMZ >>> INTERNAL LAN

LAN >>> DMZ
0
Comment
Question by:999
  • 3
4 Comments
 
LVL 11

Expert Comment

by:Manjunath Sullad
ID: 39841345
Check the connectivity to Active Directory, Telnet to DC with port number 389.

telnet Servername 389, If its working fine, There is no problem with LDAP service.

Also cross verify with Server Admin who is maintaining AD,
0
 

Author Comment

by:999
ID: 39841349
Need more than LDAP, Kerberos RCP secure channel setup and password exchanges after timeouts.

I am getting closer so will post when I nail it.
0
 

Accepted Solution

by:
999 earned 0 total points
ID: 39849353
I sorted guys DNS, LDAP(U) KERBEROD and RCP(135) from DMZ to INT
0
 

Author Closing Comment

by:999
ID: 39861177
I spent an entire weekend on this trial and error reducing the number of ports required just to allow a service to authenticate with AD.
0

Featured Post

Save the day with this special offer from ATEN!

Save 30% on the CV211 using promo code EXPERTS30 now through April 30th. The ATEN CV211 connects a laptop directly to any server allowing you instant access to perform data maintenance and local operations, for quick troubleshooting, updating, service and repair.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction This article explores the design of a cache system that can improve the performance of a web site or web application.  The assumption is that the web site has many more “read” operations than “write” operations (this is commonly the ca…
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question