When configuring LDAP or LDAPS in RSA Authentication Manager with a global catalog the connection fails
2 months ago
Originally Published: 2014-06-09
Article Number
000051045
Applies To
RSA Product Set:  SecurID
RSA Product/Service Type:  Authentication Manager
RSA Version/Condition: 8.x, 7.1, 3.0
Issue
When configuring LDAP or LDAPS with a global catalog, the connection fails with the following error:
 
There was a problem processing your request.
Test connection failed. One or more directory connections is incorrect.
Cause
An invalid or incorrect certificate is configured or the wrong port numbers are defined.
Resolution

Please see the article on how to obtain and install the Windows rootCA certificate from a domain controller to use for LDAPS and secure identity source over port 636.

LDAP

Use ports 389 for a domain controller (e. g., ldap://<fqdn> or ldap://<fqdn>:389) or 3268 for a global catalog (e. g., ldap://<fqdn>:3268).  

LDAPS

Use ports 636 and 3269 for the global catalog (e. g.,  ldaps://<fqdn> or ldaps://<fqdn>:636) or ldap://<fqdn>:3269 for a global catalog.