<![CDATA[LDAP with TLS]]>Hi!

When NetXMS is connecting to a LDAP server using the ldaps protocol (secure ldap), what certificate store does it use, to verify the ldap server's certificate? I'm trying to connect to a server which uses a certificate that is signed by a Root CA that is in the same network  (intranet, so no internet access), so basically it's a self signed certificate. The Root CA's certificate is added to Windows's cert store, and also I added it to the openssl.exe program that is shipped with NetXMS, but the connection is terminated after the TLS server hello message. In NetXMS log there is not much, it says that it couldn't connect to the server.

Regards

]]>https://forum.netxms.org/topic/6631/ldap-with-tlsRSS for NodeFri, 13 Nov 2026 16:58:17 GMTMon, 03 Aug 2020 19:43:33 GMT60<![CDATA[Reply to LDAP with TLS on Tue, 04 Aug 2020 12:46:48 GMT]]>Hi!

Thanks for the clarification!

The problem was that I only added the trusted CA to my Windows account and not the system. After I did the latter, it worked fine.

Regards

]]>https://forum.netxms.org/post/28347https://forum.netxms.org/post/28347Tue, 04 Aug 2020 12:46:48 GMT<![CDATA[Reply to LDAP with TLS on Tue, 04 Aug 2020 07:58:55 GMT]]>Hi,

we are using LDAP client provided by Windows (Wldap32.dll), so I suppose it has to use Windows certificate store for root CA certificate. There are no mention in documentation about any specific requirements for LDAP client to work over TLS. Are you sure that your LDAP server picks up correct certificate and actually supports secure connection? As I remember it is quite tricky process to setup Windows LDAP server for TLS. Did you check LDPAS connection with other tools (ldp.exe for example)?

Best regards,
Victor

]]>https://forum.netxms.org/post/28342https://forum.netxms.org/post/28342Tue, 04 Aug 2020 07:58:55 GMT