How we can know that LDAPS is working?
Applies to
- ONTAP 9
- LDAPS
Answer
- Collect packet traces where the connection between the LDAP server and the SVM can be filtered and investigated
- From Wireshark filter by TLS protocol and check the TCP port used for the communication.
- Normal LDAPS communication is on port 636 and should look like in the example:
Source Destination Protocol Src. Port Dest. Port Info
192.168.90.132 192.168.90.55 TLSv1.2 19322 636 Client Hello
192.168.90.55 192.168.90.132 TLSv1.2 636 19322 Server Hello, Certificate, Server Key Exchange, Certificate Request, Server Hello Done
192.168.90.132 192.168.90.55 TLSv1.2 19322 636 Certificate, Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
192.168.90.55 192.168.90.132 TLSv1.2 636 19322 Change Cipher Spec, Encrypted Handshake Message
192.168.90.132 192.168.90.55 TLSv1.2 19322 636 Application Data
192.168.90.55 192.168.90.132 TLSv1.2 636 19322 Application Data
192.168.90.132 192.168.90.55 TLSv1.2 19322 636 Application Data
192.168.90.55 192.168.90.132 TLSv1.2 636 19322 Application Data
192.168.90.132 192.168.90.55 TLSv1.2 19322 636 Application Data
192.168.90.55 192.168.90.132 TLSv1.2 636 19322 Application Data
192.168.90.132 192.168.90.55 TLSv1.2 19322 636 Application Data
192.168.90.55 192.168.90.132 TLSv1.2 636 19322 Application Data