SSO Multi-Site Replication

[TdisalvoOrinoco]

I have a quick question.  I was surprised that I was not able to find this info.

What port does replication occur between the SSO sites?  I am looking at doing a Geographically disbursted upgrade to vSphere from 5.0 to 5.5.  We are going to have a singleSSO instances on each site and want to know what port needs to be opened inbetween site for SSO replicaiton to occur?

Thanks

[rh5592]

I believe its LDAP port 11711 and LDAPS port 11712. Checkout William Lam's blog post virtuallyGhetto: How to verify SSO Multi-Master Replication is properly configured & working?

[TdisalvoOrinoco]

Thanks Rommel, I had read that post.  I was hoping that it was 80 or 443 or somthing more common.  I am surprised if it is this port and they did not make it clearer in the documentation.

When setting up a multi master SSO environment on regonially dispursed vCenters, you would have to make sure that these ports are open to make sure that the SSO instances are syncing.  I would think that if this is the case, it would be more pronounced in the documentation.

[rh5592]

Yeah, I know its an LDAP port and initially thought it will go through 389 but upon testing William's blog, he is correct. The ports are listed in this KB though http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=205157...

[rh5592 · Accepted solution]

Just watched the VMworld 2013 SSO Best Practice presentation and the ports I mentioned were also stated there. https://www.youtube.com/watch?v=-iiyKJGC018

[TdisalvoOrinoco]

It is mentioned all the way at the end of the presentation, but he does explcitly describe regonlaly distributed sites over WAN links and port 11711 and 11712 needing to be opened.