Forum Discussion
NimbostratusHealth Monitor for Active directory VIP
Hi Team,
Need one information regarding health monitor.
We are having Active Directory VIP . Currently the monitor using is TCP . Can I get a sample monitor which can check whether authentication is happening with DC's .
Because recently we had issue for one production application where users not able to authenticate using back end DCs,but VIP was showing UP because of TCP monitor.
Thanks for your help in advance.
3 Replies
- Kevin_Stewart
Employee
You might want to just use a simple LDAP monitor against a pool of DCs listening on port 389 or 636. Example:
User Name: cn=administrator,cn=users,dc=mydomain,dc=com Base: cn=users,dc=mydomain,dc=com Filter: sAMAccountName=bill.userThis actually checks the ability to authenticate (simple bind with admin account), and performing queries (the search filter). This is probably as close as you're going to get without dropping into the management plane to test Kerberos auth.
Kiran_145850thank you for the reply.
Here in my case the backend DCs are listening on port 3268.
In this case do we need to use any alternative.
- Kevin_StewartIs 3268 used for LDAP?
