How to change LDAP port used by the client(WS2016)?

Question

Hello Everyone

We have application from Cisco running on windows server 2016. This application is leveraging Active directory(AD) on the domain controller(DC).

The application is using the non-secure LDAP port 389 to communicate with the AD. We have a requirement to change the port used to 636 which is the secure one.

On AD server, the port 636 is opened and the CA certificate is implemented already. I contacted the application vendor(Cisco) and they said that this configuration should be made on the windows level and the application doesn't expose any option to change the LDAP port number.

How we can make the application server(client) use the port 636 instead of the port 389 to communicate with the AD server? is that done from the registry or group policy? much appreciated if someone can share the detailed steps.

Answer 1

Hi,

Based on your needs I recommend you to refer to the following links:

Step by Step Guide to Setup LDAPS on Windows Server | Microsoft Community Hub

Best Regards

Zunhui

Answer 2

Hello,

The LDAP is used to read from and write to Active Directory. By default, LDAP traffic is transmitted unsecured. You can make LDAP traffic confidential and secure by using SSL/Transport Layer Security (TLS) technology. Then listen on port 636 on the client. For details, you can refer to the following link:

Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) - Windows Server | Microsoft Learn

Best Regards

Zunhui

Answer 3

Thanks for your reply Zunhui. I saw that article but it doesn't show how to make the client using the secure LDAP port 636 to communicate with LDAP server.

Is there any MS documentation in this regards?