Network Management
How to Enable LDAPS (LDAP over SSL) in the SolarWinds Observability Self-Hosted Platform
This article discusses how to enable LDAPS (LDAP over SSL) authentication in the SolarWinds Self-Hosted Platform. To enable LDAPS, you must ensure your Domain Controller is properly configured with a valid SSL certificate, verify LDAPS connectivity, and then configure LDAPS options in SolarWinds. After enabling LDAPS, authentication for AD users occurs securely over port 636 using SSL..
First published date
Last published date
Overview
This article describes how to configure LDAPS (LDAP over SSL) authentication in the SolarWinds Self-Hosted Platform.
LDAPS provides secure, encrypted communication between the Orion Web Console and Active Directory Domain Controllers.
This configuration is performed in Advanced Active Directory Settings under the Accounts section.
Product section
Resolution
Pre-Requisites:
Before enabling LDAPS in the SolarWinds Self-Hosted Platform, make sure your Domain Controller has a valid SSL certificate installed that includes the server’s FQDN and supports Server Authentication. LDAPS (TCP port 636) must be enabled and reachable from your SolarWinds server, and firewalls should allow secure traffic to the Domain Controller on this port.
Please refer: https://techexpert.tips/windows/enabling-the-active-directory-ldap-over-ssl-feature/
On Solarwinds Web Console:
a. Go to Settings
b. Select All Settings
c. Under User Accounts, Select Advanced Active Directory Settings
d. Toggle Authenticate Active Directory Users via LDAP → ON
e. Fill out the connection fields:
- Directory Server Address
-
Port Number (Once you check the Use SSL box, it will automatically switch from 389 to 636)
- Domain DN
-
Auth Type
- Check this box to force LDAPS encryption. Use SSL
f. Test the LDAPS Authentication by relogging to the Web Console using domain account.