ArcGIS for Server 10.1 failed to connect to Window Domain/LDAP as user store

[fuliaoli]

Hi,

We installed the server on Windows 2008 R2 with a domain user. Installation went ok, but when we tried to use either Window Domain or LDAP as user/role store, errors occurred:

Test connection failed.
[LDAP: error code 8 - 00002028: LdapErr: DSID-0C0901FC, comment: The server requires binds to turn on integrity checking if SSL\TLS are not already active on the connection, data 0, v1db1]

We tried to use another tool to connect to our LDAP:636 and it was ok.
My questions is what the ArcGIS Server host settings and the domain server settings should be set for the two to communicate?

We haven't found any detailed about that.

Thanks in advance,

Regards,
li

[BubbaHey]

I wonder if you need to enable SSL. Are you using Web Adaptor?

See: http://resources.arcgis.com/en/help/main/10.1/index.html#/Enabling_SSL_on_ArcGIS_Server_when_accesse...

See also:


Configuring ArcGIS Server security
http://resources.arcgis.com/en/help/main/10.1/index.html#//0154000005qz000000

[BubbaHey]

Here's another link:

Securing services with users and roles from an LDAP server

http://resources.arcgis.com/en/help/main/10.1/index.html#//01540000050w000000

[fuliaoli]

Thanks a lot!
How did you find those? That will give us some ammunitions to tackle the problem with.
I'll have to wait until our domain admin comes in next week. I'll let you know the result.
You have a good day.
li

[BubbaHey]

Welcome. When I searched on ESRI's support site, I didn't find much, but just a Google search of   ArCGIS security 10.1 ldap brought up a lot of links.

[fuliaoli]

Somehow we are still unable to use Window Domain/LDAP as user store. Our network support opens a ticket with Esri to see how that goes. Thanks.