[Samba] Global Catalogue

[Rowland Penny]

On Fri, 12 May 2017 00:08:50 +0530
Anantha Raghava <raghav at exzatechconsulting.com> wrote:

> Hello Rowland,
> 
> ldap search command throws error as below. I am unable to search ldap.
> 
> -------
> 
> ldap_initialize( ldap://dc.exza.local:3268 )
> ldap_start_tls: Can't contact LDAP server (-1)
> Enter LDAP Password:
> ldap_sasl_bind(SIMPLE): Can't contact LDAP server (-1)
> ----------
> 
> I am using BIND_DLZ dns back end. and server is listening on 3268 and
> 3269
> 

You need to set up tls correctly on the DC, see here:

https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_%28LDAPS%29_on_a_Samba_AD_DC

Rowland