About AnthonyCSheehy

AnthonyCSheehy · 09-07-2021

Unity Connection 12.0.1.21900-10 Until our DCs where restricted to LDAPS only (to alleviate a serious NTLM exploit) Unity was happily syncing users. After the restriction we turned to Unity and added the port number (3269) and ticked the "Use TLS" an...

AnthonyCSheehy · 09-08-2021

Update: After talking to our Partners, we restarted the Dirsync service. Now - the LDAP interface throws up unverified certificate errors... but the dirsync service is now syncing users! Go figure!

AnthonyCSheehy · 09-07-2021

Yes - 3269 is the global catalog LDAPS port (which allegedly provides better performance than the standard 636.) We tried both with the same response! We have reached out to our partners on this - but every avenue that helps...

AnthonyCSheehy · 09-07-2021

Thanks @Roger Kallberg but as noted in the OP, FQDNs were provided. The trace also confirms that Dirsync removes the FQDN and replaces it with an IP Address. [getHostAddress] Hostname=dc.**********.uk[getHostAddress] Result string = 192.**.**.***[mak...

AnthonyCSheehy · 09-07-2021

Well firstly, both DCs Certificates are added to tomcat-trust as per documentation. The CA Certificate is also registered with tomcat-trust. The tomcat service has been restarted. The Certificates appear in the Dirsync trace. Besides, when this is th...

AnthonyCSheehy · 03-22-2018

Ah - so if you set MFA on the user - it disables Basic Authentication. So to lock down this highly sensitive user account - use conditional access to deny access to anything but the IP address of the Unity server. And then disable MFA, and Basic Auth...

Member Since	‎03-22-2018 02:44 AM
Date Last Visited	‎11-24-2021 05:50 AM
Posts	7

User Statistics

User Activity

Unity Connection LDAPS Dirsync No errors but not syncing users.

Re: Unity Connection LDAPS Dirsync No errors but not syncing users.

Re: Unity Connection LDAPS Dirsync No errors but not syncing users.

Re: Unity Connection LDAPS Dirsync No errors but not syncing users.

Re: Unity Connection LDAPS Dirsync No errors but not syncing users.

Re: Interesting so I doubled