Forum Discussion

dfinn_116037's avatar
dfinn_116037
Icon for Nimbostratus rankNimbostratus
Jan 23, 2014

Is it possible to load balance ldap requests to Microsoft AD servers?

Our linux servers currently authenticate using ldap against Microsoft AD servers. Right now we are doing this using insecure ldap and we point directly at the AD servers. What we would like to do i...
design
Wand_97484's avatar
Wand_97484
Icon for Nimbostratus rankNimbostratus
Jan 24, 2014

Hi Dan,

 

if you have the following setup: DC A Hostname DCA.myad.net DC B Hostname DCB.myad.net each of this hosts would have different Certificate installed to enable LDAPS at 626 (DC) or 3269 (GC) port.

 

Add a LTM ViP with SSL offload Hostname DCALL.myad.net and a Server SSL Profile. This will perform SSL offload at the LTM for the VIPname and re-encrypt to the DC's (if they are properly configured to accept LDAPs).

 

cheers