AD LDAP Server Identity Source Settings

[the1960]

Author : Joseph Sciallo

URL : http:////docs.vmware.com/en/VMware-vSphere/6.7/com.vmware.psc.doc/GUID-98B36135-CDC1-435C-8F27-5E0D0...

Topic Name : Active Directory LDAP Server and OpenLDAP Server Identity Source Settings

Publication Name : Platform Services Controller Administration

Product/Version : VMware vSphere/6.7

Question :

How can I check whether the source can be reached via port 636. I'm using the vcsa console

[berndweyand]

you can test from another windows server via lpd.exe if ad-controller is accepting ldaps-connections

from vcsa-console its possible with ldapsearch - see manpage for options

[the1960]

Thanks for the information.

Small correction it is ldp.exe not lpd.exe

The tool can connect to the AD servers from a Windows server on port 636, but that doesn't mean I can access them from vCenter on port 636.

Is there any way to test this via the remote console?

Br

[berndweyand]

yes - i wrote that ldp.exe can test from windows.

but i also wrote that ldapsearch can test from the vcsa - just ssh into the vcsa and test

[Lalegre · Accepted solution]

If the only thing you want to test is port connectivity.

From VCSA you can login into SSH or using Shell and use curl -v telnet://DomainControllerIP:636

There you will confirm if it is reachable.

[the1960]

Super that's it.

Thanks

[Ajay1988]

Use curl command for vcsa . Check VMware Knowledge Base