Forum Discussion

JamesCrk's avatar
JamesCrk
Icon for Cirrus rankCirrus
Jan 17, 2023

LDAPS vip - how to?

based on these two articles - https://relevantsecurity.wordpress.com/2021/04/11/ldap-channel-binding-and-load-balanced-vips/ https://support.f5.com/csp/article/K05648102 It seems MS hardening has ...
security
  • JamesCrk's avatar
    JamesCrk
    Feb 10, 2023

    sorry forgot to reply. We got it workign using client and server ssl certs, the trick is you need all the sans in the cert including the Ip address of vip, ip address of pool member, domain the client connects to, the hostname of the pool member etc.

buulam's avatar
buulam
Icon for Admin rankAdmin
Jan 19, 2023

Hi JamesCrk perhaps a quick check on the hostname is doing a hosts file entry and seeing if you point the LDAP hostname to the VIP, if that affects it?

Can you share the VIP config otherwise to see what else might need to be adjusted?