Forum Discussion

RobL216's avatar
RobL216
Icon for Nimbostratus rankNimbostratus
May 23, 2022

Load Balance LDAPS

Hi,

So I have followed this document, Load balancing LDAPS on BIG-IP systems (f5.com), and before trying the LDAPS part thought I would just ry with 393 first.  That works fine.

However following the first part of the document with just passthrough for LDAPS fails.  If I create the monitor and put the port 636 and No Security as noted in the document for passthorugh it states all nodes are down.

If I enable SSL in the security nodes are shown as up but when I try and connect to the VS using that monitor and pool it cannot connect.

Not sure as I have followed the document letter for letter but is does not seem to work for LDAPS.  Am I missing something or do I need to use the SSL offloading method?

Thanks in advance.

application delivery
  • Paulius's avatar
    Paulius
    Icon for MVP rankMVP
    Jan 03, 2023

    RobL216Would you be able to provide your configuration so that I can look it over? I am unsure what port 393 is that you have referenced but the port should be 636. From my understanding the only difference between the two configurations provided in the article is the introduction of the SSL profiles on the Virtual Server for SSL decrypt and encrypt from client to VS and VS to LDAPS servers.