topic Re: Synchronization with ActiveDirectory in Administration and Deployment

Synchronization with ActiveDirectory

alexandros — Mon, 18 Nov 2019 09:50:53 GMT

Hello ,

I am trying to synchronize AD with SAS Metadata Server, but I am getting the below error:

Unable to contact the LDAP server.

I suppose that the problem is tha AD uses different port from default 389 and tls 1.2 is required.

Do you know how to check which tls version is already used and how I can to modify this?

I have tried to use options TLS_MODE_ON in call ldaps_open routine but I am getting the same error.

The current version of SAS is 9.4 TS Level 1M4 and the operating System is Windows Server 2012

Thank you in advance.

Xenakis Alexandros

Re: Synchronization with ActiveDirectory

SASKiwi — Tue, 19 Nov 2019 01:07:01 GMT

Another possible explanation is you need to make a firewall rule change to allow traffic on a particular port.

Re: Synchronization with ActiveDirectory

alexandros — Tue, 19 Nov 2019 07:47:14 GMT

I don't think that is a firewall issue, as I can telnet the Port from the machine via windows powershell.

Re: Synchronization with ActiveDirectory

SASKiwi — Tue, 19 Nov 2019 18:53:39 GMT

This type of problem is best solved with SAS Tech Support if you are not already doing so.

Re: Synchronization with ActiveDirectory

alexandros — Fri, 22 Nov 2019 08:38:24 GMT

Thank you all for your tips.

The problem was due to the server name. The server was "kind of" parent IP which directs you every time to different server for connecting. After we changed that the connection worked fine.