Yvan Duhamel

Results 116 comments of Yvan Duhamel

Coming back on this topic, I confirm this cannot be configured, unfortunately. Is it something you actually need, or just a FYI?

Noted. Indeed, for the time being you can manually edit this property to include your LDAP property, which is exactly what the code change would do anyway. Thanks for reporting...

You can replace the default connection with your own LDAP connection and set the port to 636 in central admin > Security > LDAPCP global configuration. If LDAPS is correctly...

@mpatrick210 yes it should work, although you should update LDAPCP The LDAP path is correct, but I forgot to mention that you should also check [SecureSocketsLayer](https://docs.microsoft.com/en-us/dotnet/api/system.directoryservices.authenticationtypes) in the authentication type...

@mpatrick210 based on the [enum type values](https://docs.microsoft.com/en-us/dotnet/api/system.directoryservices.authenticationtypes?view=dotnet-plat-ext-6.0), you can use `Encryption`, which has the same value as `SecureSocketsLayer`

@mpatrick210 can you try to connect to your LDAP using LDAPS on the SharePoint machine, as the SharePoint farm/apppool account, using ldp.exe as [documented here](https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enable-ldap-over-ssl-3rd-certification-authority#verify-an-ldaps-connection) ?

I did some tests and I think it works if you use the following settings: LDAP path: `LDAP://dc.contoso.local:636/CN=Users,DC=contoso,DC=local` [Authentication type](https://docs.microsoft.com/en-us/dotnet/api/system.directoryservices.authenticationtypes?view=netframework-4.8): `Encryption, Secure` Can you give this a try? Note that,...

@mpatrick210 were you able to validate if it works using the settings above?

@mpatrick210 I did again additional tests to understand how to do LDAPS over SSL. It is more complicated than I thought. There are 2 operations to consider: - LDAP bind:...

@mpatrick210 I tried again and now both scripts fully use LDAPS over SSL. I'm not sure why I observed differently previously. But the outcome is that LDAPCP can use LDAPS...