When configuring LDAP or LDAPS in RSA Authentication Manager with a global catalog the connection fails

[#1]

Article Number

000017475

Applies To

RSA Product Set:  SecurID
RSA Product/Service Type:  Authentication Manager
RSA Version/Condition: 8.x, 7.1, 3.0

Issue

When configuring LDAP or LDAPS with a global catalog, the connection fails with the following error:
 

There was a problem processing your request.
Test connection failed. One or more directory connections is incorrect.

Cause

An invalid or incorrect certificate is configured or the wrong port numbers are defined.

Resolution

Please see the article on how to obtain and install the Windows rootCA certificate from a domain controller to use for LDAPS and secure identity source over port 636.

LDAP

Use ports 389 for a domain controller (e. g., ldap://<fqdn> or ldap://<fqdn>:389) or 3268 for a global catalog (e. g., ldap://<fqdn>:3268).  

LDAPS

Use ports 636 for a domain controller (e. g., ldaps://<fqdn> or ldaps://<fqdn>:636) or 3269 for a global catalog (e. g., ldap://<fqdn>:3269).