looks like you need to enable tls for ad to start listing for ldaps

no experience just a quick search.

https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enable...

[https://docs.microsoft.com/en-us/media/logos/logo-ms-social.png]https://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enable-ldap-over-ssl-3rd-certification-authority

Enable Lightweight Directory Access Protocol (LDAP) over Secure Sockets Layer (SSL) - Windows Server | Microsoft Docshttps://docs.microsoft.com/en-us/troubleshoot/windows-server/identity/enable-ldap-over-ssl-3rd-certification-authority docs.microsoft.com Describes how to enable LDAP over SSL with a third-party certification authority.

Thanks Brandon Lund KansasNet Internet Services 785-776-1452

________________________________ From: observium observium-bounces@observium.org on behalf of Tony Guadagno via observium observium@observium.org Sent: Wednesday, February 16, 2022 1:49 PM To: Tony Guadagno via observium Cc: Tony Guadagno Subject: [Observium] LDAP auth to MS AD with TLS Self Signed Cert

Hi,

I have ldap auth working mostly, if I set tls to false, I can authenticate. However, I want to be secure and when I enable tls, I get a debug error that says:

Error binding to LDAP server: servername.local: Can’t contact LDAP server

I am guessing the issue is the self signed cert that my server is using.

My question is…how do I configure Observium to accept self signed certs for ldap?

thanks

Tony