LDAP over SSL

Question

Hi,

I have configured LDAP over SSL in my AD Server. Using ldp I am able to connect successfully using port 636.

Shall I need to configure in GPO for Client Computers to access LDAP which is configured over SSL or will connect to that server without any configuration

Please advise

Answer 1

Hi,

LDAPS is primarily intended to support simple bind requests, so plain text passwords are encrypted when transmitted over the network. To use this functionality the application or service must be specifically written to support LDAPS, as it needs to request a SSL based connection. Typically security and network devices use simple binds when LDAP\S is used.

I don't believe there is any GPO settings that would force normal clients to use LDAPS as the default connections method.

Gary.

Answer 2

Hello,

Thank for reaching out.

Yes, you may Enable GPO for LDAP sign-in to improve security.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/enable-ldap-signing-in-windows-server

Thank you.