Forum Discussion

Abhash_way_1901's avatar
Abhash_way_1901
Icon for Nimbostratus rankNimbostratus
Aug 13, 2015

LDAP Monitor issue

Hello everyone,

 

we have a virtual server configured on the F5 with both vs and pool members listening on port 14389 (non ssl) and 24389 (ssl) respectively. LDAP monitor for port 14389 works fine but for 24389 is failing .. is there a way to check why its failing? we are able to connect fine to the servers directly.

 

thank you, -Abhash

 

application delivery
deployment
LTM
monitor

2 Replies

Sort By
  • Chase_Abbott's avatar
    Chase_Abbott
    Icon for Employee rankEmployee
    Aug 13, 2015
    What is your monitor accomplishing for the 24389 port? Assuming we have access to the port, I'd run wireshark on the LDAP server and SSL decrypt the traffic between LTM and the LDAP server. https://support.f5.com/kb/en-us/solutions/public/9000/300/sol9311.html provides a basic overview of our LDAP monitors but at the bottom of the SOL are further references for LDAP/S monitors and potential issues when using TLS. The Wireshark capture will show you the bind success/failure if it even gets that far. From there you should be able to see what's up.
  • Mike_Dayton_108's avatar
    Mike_Dayton_108
    Icon for Nimbostratus rankNimbostratus
    Oct 02, 2015

    In the monitor-> security "none" is what is likely causing the problem. If you set it to security "ssl", 14389 will start failing and 24389 will start working.

     

    I ended up having to create two monitors.