Unable to join a Domain Controller to SPP

Hi Samuele,

Is this for a Microsoft Active Directory asset? If so, When adding the MS AD asset, please make sure to select the Microsoft Active Directory platform  (because the LDAPS platform is for other non-MS AD directories that support OpenLDAP)

What version of SPP are using in this case please?

We added support for connecting to MS Active Directory platform asset via SSL (using ldaps protocol) in SPP version 7.1 feature release (ID 298560) :

https://support.oneidentity.com/technical-documents/one-identity-safeguard-for-privileged-passwords/7.1/release-notes#TOPIC-1917921

Thanks!

Hi,

Yes it is for a MS AD asset. I have selected the Microsoft Active Directory platform (i don' t know why the error says ldaps). I'm using the 7.0 version of SPP.

It is possible to connect using the ldaps protocol only with the 7.1 version or i can try using the 7.0 version?

Thank you,

Samuele

Hi Samuele,

You would have to upgrade to SPP version 7.1 to use ldaps protocol for AD Asset.

If you are on 7.0 LTS you can only use LDAP port 389 in this version.

Thanks!

Hi,

And without the upgrade there is anything that i should check to connect the AD like a Active Directory platform and not using the ldaps protocol?

Thank you,

Samuele

You should make sure that DNS can resolve the domain name or FQDN of DCs, otherwise, you can use the field to specify a Domain controller in connection settings and use IP address to see if that helps?

Also port 389 for LDAP would be required if using 7.0 LTS

Thanks!

Hi,

For now i have fixed the error disabling the SSL encyption, but i want to use the SSL encryption. Now i presume that the problem is the SSL certificate, but the certificate of SPP is auto-generated.

The are other things that i can check?

Thank you,

Samuele

You would have to upgrade to SPP version 7.1 to use ssl via ldaps protocol for AD Asset

Ok , i take into consideration to upgrade to the version 7.1

Thank you,

Samuele

Ok , i take into consideration to upgrade to the version 7.1

Thank you,

Samuele