RE: [ActiveDir] What is the LDAPS port?

Thu, 09 Dec 2004 09:28:23 -0800

Those articles list what service is responsible for the port. 636 is listened to by the LDAP service. It just happens to be SSL LDAP that is spoken over it, SSL doesn't change that it is still LDAP. Some of those also list the GC port 3268 as being listened to by LDAP which is also correct.
 
Service Name UDP TCP
LDAP   3268 (global catalog)
LDAP   3269 (global catalog Secure Sockets Layer [SSL])
LDAP 389 389
LDAP   686 (SSL)
 
This is from winldap.h
 
//
//  Global constants
//
 
#define LDAP_PORT               389
#define LDAP_SSL_PORT           636
#define LDAP_GC_PORT            3268
#define LDAP_SSL_GC_PORT        3269
 
 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Geary, Simon (Computer People)
Sent: Thursday, December 09, 2004 11:17 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] What is the LDAPS port?

Thanks both, I figured it should be 636. I have also just checked the IANA list and it confirms 636 is correct.
 
But it was these Microsoft links made me wonder. Looks like they have a couple of errors to correct here then as these all specify 686 as the LDAP port.
 
 
 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Paul van Geldrop
Sent: 09 December 2004 15:47
To: '[EMAIL PROTECTED]'
Subject: RE: [ActiveDir] What is the LDAPS port?

If I'm not mistaken, it should be port 636.

Also, keep in mind that FRS uses a selection of random ports, so make sure to include these if you're going to configure a firewall to allow for replication.

 

This article contains a list you might find helpful:

 

http://support.microsoft.com/default.aspx?scid=kb;en-us;832017

 

 

Regards,

 

Paul.

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Geary, Simon (Computer People)
Sent: donderdag 9 december 2004 16:29
To: '[EMAIL PROTECTED]'
Subject: [ActiveDir] What is the LDAPS port?

 

I have seen LDAP over SSL listed variously as both port 636 and 686. Can anyone give me a definitive answer? Or are both valid in different situations and I am just missing something?

 

The background is that I want to get a list of all the ports required to run AD replication and FRS through a Firewall. I have seen the various docs from Microsoft on this but they don't seem to be consistent.


This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you.

Reply via email to