question

JustinVaughn-8951 avatar image
0 Votes"
JustinVaughn-8951 asked VickyWang-MFST answered

How do I see LDAPS status on a Windows DC ?

Hello experts, We have 2 Server 2016 Domain Controllers in our environment and the both should be running LDAPS. They were both working last year. I updated the certificates on both of them about a month ago, but now only one is working for LDAPS connections. I'm not sure why the 2nd server stopped working. On my bench computer, if I run u the LDP.exe test tool or use the command openssl.exe s_client -connect <DCNAME>:636 I can see the cert on the 1st DC, and make a good connection, but I get an error on the other server and cannot connect. Looking at the certificates MMC console, I can see both servers have current and valid certificates so I am really confused why the one stopped working when all I did was replace the certs.

windows-server-security
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JustinVaughn-8951 avatar image
0 Votes"
JustinVaughn-8951 answered

I should also mention that our server is Windows Server Core and I am managing the certs remotely using the MMC snap in. So I feel like something is not updating correctly. Also When I use the openssl.exe s_client connect command, the error is 10054 no peer certificate available like the 2nd DC doesn't have a private key or something. It's really confusing.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JustinVaughn-8951 avatar image
0 Votes"
JustinVaughn-8951 answered

I got this sorted out finally. I had to use the certutil and certreq commands on the local machine to create a new private key and get the cert signed in order for it to work. Apparently using a remote MMC snap in created some issues and either I did not have access to the key or something.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

VickyWang-MFST avatar image
0 Votes"
VickyWang-MFST answered

Hi,
Thank you for posting in our forum.
I am glad that your problem has been solved by yourself.
Thank you also for sharing the method, if you can, you can make your own answer.
Best wishes
Vicky

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.