For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

djz_104054's avatar
djz_104054
Icon for Nimbostratus rankNimbostratus
Feb 13, 2014

Client SSL converion to TLS for the server for LDAP

My use case is to translate a SSL connection coming from the client into a TLS connection directed to the server for the LDAP protocol. The client cannot use STARTTLS via port 389, as this is just no...
application delivery
devops
iRules
LTM
security
ssl
tls
Colin_Streicher's avatar
Colin_Streicher
Icon for Nimbostratus rankNimbostratus
Jul 16, 2014

So I've been fighting with this for a while, the issue appears to be that the F5 does not support terminating TLS connections on LDAP. Since LDAPS has been deprecated for a while in openldap, I've turned it off explicitly so there are no surprises if it is removed.

 

This is pretty annoying to me since its complicated the setup I am working with. There is also a strong chance that I'm missing something since the ldap monitor supports TLS and works fine. It seems odd that it would support half of TLS on LDAP and not the other half. Anyways, just my $.02, if anyone from F5 can comment on where ldap TLS termination is in fact supported or not that would be helpful.