Lost contact to LDAP

[mrmarkuz (Markus Neuberger)]

To use ldapsearch to check AD see the wiki or following thread:

How to (re)enable TLS/STARTTLS in Nethserver AD

That’s true. With StartTLS it’s just ldap:// too, To test starttls: ldapsearch -Z -D CN=admin,CN=Users,DC=ad,DC=domain,DC=tld -w <PASSWORD> -b CN=Users,DC=ad,DC=domain,DC=tld -h <NSDC IP> To test ssl: ldapsearch -D CN=admin,CN=Users,DC=ad,DC=domain,DC=tld -w <PASSWORD> -b CN=Users,DC=ad,DC=domain,DC=tld -H ldaps://ad.domain.tld

@Ruaraidh

DiscoverDcType=dns
LdapURI=

I have following settings:

DiscoverDcType=ldapuri
LdapURI=ldaps://nsdc-testserver.ad.domain.local

Do you use an internal DNS server that maybe doesn’t point to the AD anymore?

Can you ping the NSDC IP address?