Network Management

NPM 12.x Advanced AD settings

This article discusses using LDAP instead of MSAPI in the Advanced AD Settings for NPM 12.x

First published date

10/24/2018 3:14 PM

Last published date

10/26/2021 12:43 AM

Overview

The new Advanced AD settings with LDAP supports implementation that allows authenticating users from a single domain. If you are authenticating users from multiple domains this will not work. You will need to use MSAPI which is the standard method that has always been part of NPM.

Product section

Network Performance Monitor

Resolution

When SSL is used (then LDAP is used) and the default port is 636.If using SSL/TLS, the preferred port is 636. This port requires SSL/TLS, and if the SSL/TLS negotiation is not working, the connection will not complete. To ensure proper security when using port 389, use LDAP connection (without SSL).

If you want to see objects from multiple domain in the AD forest with a single LDAP connection, the SSL/TLS port for that “global catalog” directory is 3269. Changing the port to 3269 and the Domain DN to DC=example,DC=ex,DC=us will allow you to search, but only the exampleexus domain, regardless of what domain you type in the search field.

If you are looking to do multiple domain, please contact support so a feature request can be submitted to development.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.