Forum Discussion

Warren_129981's avatar
Warren_129981
Icon for Nimbostratus rankNimbostratus
Feb 13, 2014

Client unable to bind to LDAPs through LTM virtual for LDAPS

I have setup my F5 LTM 11.4.0 to have a virtual server that is receiving LDAP requests over 636. I have a profile setup with a cert/key for the client communication and a server profile setup with no...
big-ip ltm
pmilot's avatar
pmilot
Icon for Altostratus rankAltostratus
Feb 14, 2014

I've been working with Warren on this issue.

 

The fail occurs during the SSL Handshake. When we perform a TCP dump, we see the following.

 

Client Hello Server Hello Cipher suites negotiated Change cipher spec Change cipher spec

 

Than the F5 closes the connection (RST,ACK) and ltm logs show "SSL Handshake Failed". The client never gets to the point of attempting to bind to the directory.

 

We have reproduced this from various clients. The client SSL profile is currently set to the default with a cert/key. The certificate contains the vip FQDN in the CN= field and SubjectAltName. Virtual Server is of type "standard". Pretty basic really.

 

The Directories are Microsoft ADS.

 

Thanks