[Samba] Authenticating against Samba 4 AD LDAP service

[Rowland Penny]

On Thu, 06 Sep 2018 13:13:11 +0700
Konstantin Boyandin via samba <samba at lists.samba.org> wrote:

> Kris Lou via samba писал 2018-09-06 02:12:
> > Also:
> > 
> >  -H ldap://10.100.0.4
> > 
> > should probably be ldaps://URI
> > 
> > You can potentially this in smb.conf, but that is definitely not
> > recommended.
> > 
> > https://wiki.samba.org/index.php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC
> 
> That's the strange part. I have set up using TLS certificate (Lets 
> Encrypt) as recommended in guide. When I do
> 
> # ldbsearch -U Administrator --password='[password]' -H 
> ldaps://dc.ad-lan.com:636
> 

You don't need the ':636' the 'ldaps' is sufficient.

Rowland