Difference between revisions of "Varify LDAPS"

Revision as of 05:31, 28 February 2015

Down n Dirty

Use LDP.exe (Native on 2008+, or Support Tools on 2003- )
Click Connect
Set hostname to the FQDN of the computer/server you're wanting to test
Set port = 636
Check SSL
Click Connect

If successful, the output window should look something like this: (ERRORS are normal on a successful connection)

ld = ldap_sslinit("localhost", 636, 1);
Error <0x0> = ldap_set_option(hLdap, LDAP_OPT_PROTOCOL_VERSION, LDAP_VERSION3);
Error <0x0> = ldap_connect(hLdap, NULL);
Error <0x0> = ldap_get_option(hLdap,LDAP_OPT_SSL,(void*)&lv);
Host supports SSL, SSL cipher strength = 128 bits
Established connection to localhost.
Retrieving base DSA information...
Result <0>: (null)
Matched DNs: 
Getting 1 entries:
>> Dn: 
        1> currentTime: 02/27/2015 21:11:03 Pacific Standard Time Pacific Daylight Time; 

Reference

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118761-technote-firesight-00.html