AD Backup over Secure LDAP Port

hello @
i hope you are doing well , 

commvault support for both LDAP and LDAPS so first ensure LDAPS is enabled and properly configured with a valid SSL certificate after this Configure Configure the Lightweight Directory Access Protocol (LDAP) is on the Active Directory Domain server on commvault 

https://documentation.commvault.com/11.20/configure_active_directory_group.html

Best Regards,
Mohamed Ramadan
Data Protection Specialist

Hi ​@Mohamed Ramadan 

Thanks for the reply.

But this is not related what we want to do.

I want to take AD backup with secure LDAP port 636. Normally Commvault use standard LDAP port 389.

How we can achieve this ?

hello ​@0ber0n 


Using port 636 means you're using LDAPS instead of LDAP, so you need to first check your AD configuration. For example, I have a lab setup with standard LDAP, and when I tried to connect to my DC using the LDAPS protocol, I encountered this error.
 

look at this article : 
https://techcommunity.microsoft.com/blog/sqlserver/step-by-step-guide-to-setup-ldaps-on-windows-server/385362

I hope the above is useful to you.
Best Regards,
Mohamed Ramadan
Data Protection Specialist

Hi ​@Mohamed Ramadan 

Yes of course it is already configured over secure ldap port 636.

Normally, according to the documentation, commvault says standard port 389 is required.

I am asking, can I take backups with commvault while secure ldap is on port 636? Is Commvault AD agent can configurable to take backup over 636 ?

https://documentation.commvault.com/2024e/expert/active_directory_system_requirements_02.html#port-requirements

Hi team,

Anyone has any idea about this ?

Hello ​@0ber0n 

Adbackup does not support to backup via LDAPS on port 636. The AD iDataAgent runs on DC and query AD locally (not over the network).

Best,

Rajiv Singal

Hi ​@Rajiv 

In this case, the situation you specified also be valid for port 389? If a local query is being made, why is port 389 specified in the port requirement?