Converting from LDAP to LDAPS

[Mike McCall]

I've been reading through the Wiki and the Community, but I just cannot figure out why I'm unable to successfully move from LDAP to LDAPS.

Right now, we have a working [un-encrypted] LDAP connection (and we have a VPN tunnel setup, if that's relevant). I uploaded and validated a new certificate, but as soon as I check the SSL box, I get the following error:

"Server Operational Status is false
Verify server address and port are correct and accessible"

What am I not doing (or doing wrong)?

[Deepak Ingale1]

Tried to changed the port from 389 (LDAP port) to 636?

Those ports may be required to open up from firewall end as well

[Mike McCall]

I'm not specifying any port--I assume it's currently working on 389 by default--but when I click on "SSL," the error message does repeat the URL with port 636 specified (which should be open, according to my network guys).

Server URL is set to "ldap://000.11.222.33"

Error message says:

"ldap://000.11.222.33 000.11.222.33:636

Server Operational Status is false

Verify server address and port are correct and accessible"

(Note: that's not the actual Server URL; I'm just trying to show that it's the same one repeated in each spot.)

[Deepak Ingale1]

Looking at message i strongly feel that this has to do with ports only since address remains the same. Could you try appending port to server url if not already done and check.

[Mike McCall]

I currently have "ldap://[host]" (SSL UN-checked) working. Below are all of the other combinations I can think of (just to rule them out).

If I try the following:

1. "ldap://[host]" (SSL checked)

I get the following error message:

      ldap://[host] [host]:636

      Verify server address and port are correct and accessible

If I try the following:

1. "ldaps://[host]" (SSL checked)
2. "ldaps://[host]" (SSL UN-checked)

I get the following error message:

      ldaps://[host] [host]:636

      Verify server address and port are correct and accessible

If I try the following:

1. "ldap://[host]:636" (SSL checked)
2. "ldap://[host]:636" (SSL UN-checked)

I get the following error message:

      ldap://[host]:636

      Verify server address and port are correct and accessible

If I try the following:

1. "ldaps://[host]:636" (SSL checked)
2. "ldaps://[host]:636" (SSL UN-checked)

I get the following error message:

      ldaps://[host]:636

      Verify server address and port are correct and accessible