Forum Discussion
Warren_129981
Feb 13, 2014Nimbostratus
Client unable to bind to LDAPs through LTM virtual for LDAPS
I have setup my F5 LTM 11.4.0 to have a virtual server that is receiving LDAP requests over 636. I have a profile setup with a cert/key for the client communication and a server profile setup with no...
pmilot
Altostratus
Here are the scenarios.
client => plain text => F5 => plain text => ADS:389 !WORKS!
client => plain text => F5 => SSL re-encrypt => ADS:636 !WORKS!
client => SSL PASS THROUGH => F5 => SSL PASS THROUGH => ADS:636 !WORKS!
client => SSL Client SSL Profile => F5 => SSL re-encrypt => ADS:636 !FAILS!
client => SSL Client SSL Profile => F5 => plain text => ADS:389 !FAILS!
As soon as we enable the Client-side SSL profile it fails with the SSL handshake failure.
Thanks
pmilot
Feb 14, 2014Altostratus
I'll mention as well that when we are connecting to the encrypted service we use ldaps:// and when unencrypted we change the URL to ldap://.
We do understand that concept well.
Thanks
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects